Skip to content

Commit 6316544

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions-updates group across 1 directory with 9 updates (#161)
Bumps the actions-updates group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.19.4` | `2.20.0` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` | | [chainguard-dev/digestabot](https://github.com/chainguard-dev/digestabot) | `1.3.1` | `1.3.2` | | [step-security/action-markdownlint](https://github.com/step-security/action-markdownlint) | `0.26.8` | `0.26.9` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `6.1.0` | `6.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` | | [release-plz/action](https://github.com/release-plz/action) | `0.5.129` | `0.5.130` | Updates `step-security/harden-runner` from 2.19.4 to 2.20.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.20.0</h2> <h2>What's Changed</h2> <ul> <li>Support for block policy for MacOS and Windows GitHub-hosted runners</li> <li>Support for Bitrise MacOS GitHub Actions runners</li> <li>HTTPS monitoring support for Bun for Linux runners (enterprise tier)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2.19.4...v2.20.0">https://github.com/step-security/harden-runner/compare/v2.19.4...v2.20.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/bf7454d06d71f1098171f2acdf0cd4708d7b5920"><code>bf7454d</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/673">#673</a> from step-security/fix/aggregate-error-startup-hang</li> <li><a href="https://github.com/step-security/harden-runner/commit/1188420976b49762617c32cc010cba50a9fd7a71"><code>1188420</code></a> Update non-TLS agent to v0.16.2</li> <li><a href="https://github.com/step-security/harden-runner/commit/162cfeac170141192dc6d57ade86ddf59448ad96"><code>162cfea</code></a> Update non-TLS agent to v0.16.1</li> <li><a href="https://github.com/step-security/harden-runner/commit/eb9e1f4943b602b6f338f6f79468e812c2c6b320"><code>eb9e1f4</code></a> Bring macOS runner updates from PR 674</li> <li><a href="https://github.com/step-security/harden-runner/commit/1a10b01783c147498a6dee4fa4e7122325762720"><code>1a10b01</code></a> Update Windows agent to v1.0.7</li> <li><a href="https://github.com/step-security/harden-runner/commit/8b4a105ef5119b20c97c1566b0275b9399ae188d"><code>8b4a105</code></a> Apply npm audit fixes with release-age cooldown</li> <li><a href="https://github.com/step-security/harden-runner/commit/3626e0327723bef1c4e6b01750518eccd380a5df"><code>3626e03</code></a> Default TLS status check failures to enabled</li> <li><a href="https://github.com/step-security/harden-runner/commit/100e08b39cfd419c292df7becc379b0305ac0628"><code>100e08b</code></a> Update agent-ebpf to v1.8.12</li> <li><a href="https://github.com/step-security/harden-runner/commit/774f75f2c6334606d2d3d910a663f93c9ea49b3b"><code>774f75f</code></a> Update agent to v1.8.9</li> <li><a href="https://github.com/step-security/harden-runner/commit/f312657a64c745fae39c2c66cc7c7f7bc4c804d8"><code>f312657</code></a> Extend missing-agent-dir guard to Linux and macOS cleanup paths</li> <li>Additional commits viewable in <a href="https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...bf7454d06d71f1098171f2acdf0cd4708d7b5920">compare view</a></li> </ul> </details> <br /> Updates `actions/checkout` from 6.0.2 to 7.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@​yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@​motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@​benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li> <li><a href="https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10"><code>df4cb1c</code></a> Update changelog for v6.0.3 (<a href="https://redirect.github.com/actions/checkout/issues/2446">#2446</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0">compare view</a></li> </ul> </details> <br /> Updates `chainguard-dev/digestabot` from 1.3.1 to 1.3.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/chainguard-dev/digestabot/releases">chainguard-dev/digestabot's releases</a>.</em></p> <blockquote> <h2>v1.3.2</h2> <h2>What's Changed</h2> <ul> <li>Bump step-security/harden-runner from 2.16.0 to 2.16.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/76">chainguard-dev/digestabot#76</a></li> <li>chore(workflows): add actionlint and zizmor action linters [SECINT-75] by <a href="https://github.com/stevebeattie"><code>@​stevebeattie</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/75">chainguard-dev/digestabot#75</a></li> <li>Bump chainguard-dev/actions from 1.4.12 to 1.6.13 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/78">chainguard-dev/digestabot#78</a></li> <li>Bump step-security/harden-runner from 2.16.0 to 2.16.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/77">chainguard-dev/digestabot#77</a></li> <li>Bump step-security/action-actionlint from 1.69.1 to 1.72.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/80">chainguard-dev/digestabot#80</a></li> <li>Bump step-security/harden-runner from 2.16.1 to 2.17.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/79">chainguard-dev/digestabot#79</a></li> <li>Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/81">chainguard-dev/digestabot#81</a></li> <li>Bump chainguard-dev/actions from 1.6.13 to 1.6.14 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/83">chainguard-dev/digestabot#83</a></li> <li>Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/82">chainguard-dev/digestabot#82</a></li> <li>chore: bump step-security/harden-runner to v2.19.0 by <a href="https://github.com/antitree"><code>@​antitree</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/84">chainguard-dev/digestabot#84</a></li> <li>Replace setup-crane with direct installation by <a href="https://github.com/chen-anders"><code>@​chen-anders</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/73">chainguard-dev/digestabot#73</a></li> <li>Replace create-pull-request with github-script by <a href="https://github.com/chen-anders"><code>@​chen-anders</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/74">chainguard-dev/digestabot#74</a></li> <li>feat: add registry-map input for proxy/mirror support by <a href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/72">chainguard-dev/digestabot#72</a></li> <li>Bump chainguard-dev/actions from 1.6.14 to 1.6.15 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/85">chainguard-dev/digestabot#85</a></li> <li>Bump actions/checkout from 5.0.0 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/87">chainguard-dev/digestabot#87</a></li> <li>Bump step-security/harden-runner from 2.12.0 to 2.19.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/86">chainguard-dev/digestabot#86</a></li> <li>fix: route registry-map through env var (zizmor template injection) by <a href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/88">chainguard-dev/digestabot#88</a></li> <li>fix(ci): resolve template injection and add zizmor pedantic config by <a href="https://github.com/stevebeattie"><code>@​stevebeattie</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/90">chainguard-dev/digestabot#90</a></li> <li>fix(ci): resolve shellcheck findings in action.yml by <a href="https://github.com/stevebeattie"><code>@​stevebeattie</code></a> in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/91">chainguard-dev/digestabot#91</a></li> <li>chore(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.17 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/92">chainguard-dev/digestabot#92</a></li> <li>chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/93">chainguard-dev/digestabot#93</a></li> <li>chore(deps): bump chainguard-dev/actions from 1.6.17 to 1.6.19 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/94">chainguard-dev/digestabot#94</a></li> <li>chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/97">chainguard-dev/digestabot#97</a></li> <li>chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/96">chainguard-dev/digestabot#96</a></li> <li>chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/98">chainguard-dev/digestabot#98</a></li> <li>chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/99">chainguard-dev/digestabot#99</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/antitree"><code>@​antitree</code></a> made their first contribution in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/84">chainguard-dev/digestabot#84</a></li> <li><a href="https://github.com/chen-anders"><code>@​chen-anders</code></a> made their first contribution in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/73">chainguard-dev/digestabot#73</a></li> <li><a href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a> made their first contribution in <a href="https://redirect.github.com/chainguard-dev/digestabot/pull/72">chainguard-dev/digestabot#72</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/chainguard-dev/digestabot/compare/v1.3.1...v1.3.2">https://github.com/chainguard-dev/digestabot/compare/v1.3.1...v1.3.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/chainguard-dev/digestabot/commit/33d0b78e580aa0c83fe188eb3dfad6611b662479"><code>33d0b78</code></a> chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 (<a href="https://redirect.github.com/chainguard-dev/digestabot/issues/99">#99</a>)</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/e00d2719fee3d5f19e3fdb56af4b9aff37c3e16d"><code>e00d271</code></a> chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 (<a href="https://redirect.github.com/chainguard-dev/digestabot/issues/98">#98</a>)</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/0001d8118b5fd03e559b26b7b2118e5bb6dbbe3c"><code>0001d81</code></a> Merge pull request <a href="https://redirect.github.com/chainguard-dev/digestabot/issues/96">#96</a> from chainguard-dev/dependabot/github_actions/step-sec...</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/83c08a49e01618b6d778b37693e29589d0e3c208"><code>83c08a4</code></a> Merge pull request <a href="https://redirect.github.com/chainguard-dev/digestabot/issues/97">#97</a> from chainguard-dev/dependabot/github_actions/zizmorco...</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/9f8f7d9fb4411e9bc1e62cda0c18dc821d7c5b01"><code>9f8f7d9</code></a> chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.5</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/a9691c4d7d76807f5c25ee5dd4e88b97b6e5ff73"><code>a9691c4</code></a> chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/07a126ad914d862e1fe3d9f8b639ca1cd65a31d8"><code>07a126a</code></a> chore(deps): bump chainguard-dev/actions from 1.6.17 to 1.6.19 (<a href="https://redirect.github.com/chainguard-dev/digestabot/issues/94">#94</a>)</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/ad793f1f0f9b330798d7c1ca60044a77a3fa8bd7"><code>ad793f1</code></a> chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 (<a href="https://redirect.github.com/chainguard-dev/digestabot/issues/93">#93</a>)</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/f8561c0462c38a556294872c0597627d33e73c0f"><code>f8561c0</code></a> chore(deps): bump chainguard-dev/actions from 1.6.15 to 1.6.17 (<a href="https://redirect.github.com/chainguard-dev/digestabot/issues/92">#92</a>)</li> <li><a href="https://github.com/chainguard-dev/digestabot/commit/76093d59825b80dc4bf5f633823cb902ef2f5c83"><code>76093d5</code></a> Merge pull request <a href="https://redirect.github.com/chainguard-dev/digestabot/issues/91">#91</a> from chainguard-dev/security/psec-923-digestabot</li> <li>Additional commits viewable in <a href="https://github.com/chainguard-dev/digestabot/compare/afe360aa3b0c29d88844138e8fa0349384398967...33d0b78e580aa0c83fe188eb3dfad6611b662479">compare view</a></li> </ul> </details> <br /> Updates `step-security/action-markdownlint` from 0.26.8 to 0.26.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/action-markdownlint/releases">step-security/action-markdownlint's releases</a>.</em></p> <blockquote> <h2>v0.26.9</h2> <h2>What's Changed</h2> <ul> <li>fix: fixed docker vulnerability by <a href="https://github.com/amanstep"><code>@​amanstep</code></a> in <a href="https://redirect.github.com/step-security/action-markdownlint/pull/86">step-security/action-markdownlint#86</a></li> <li>fix: updated the docker image by <a href="https://github.com/amanstep"><code>@​amanstep</code></a> in <a href="https://redirect.github.com/step-security/action-markdownlint/pull/87">step-security/action-markdownlint#87</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/action-markdownlint/compare/v0...v0.26.9">https://github.com/step-security/action-markdownlint/compare/v0...v0.26.9</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/action-markdownlint/commit/7eff996c965b6b4a8575f7971d970fc40479c321"><code>7eff996</code></a> Merge pull request <a href="https://redirect.github.com/step-security/action-markdownlint/issues/87">#87</a> from step-security/amanstep-patch-5</li> <li><a href="https://github.com/step-security/action-markdownlint/commit/429d53c05018913ff84874aaa18f869c917384af"><code>429d53c</code></a> feat: updated the docker image</li> <li><a href="https://github.com/step-security/action-markdownlint/commit/5d8b7fd7eaa4fad5e2eece6380a264f78daf839e"><code>5d8b7fd</code></a> Merge pull request <a href="https://redirect.github.com/step-security/action-markdownlint/issues/86">#86</a> from step-security/fix/docker/vulnerability</li> <li><a href="https://github.com/step-security/action-markdownlint/commit/ff5a9816a8dd5d53980cce52b07077eb38e567bf"><code>ff5a981</code></a> fix: fixed docker vulnerability</li> <li>See full diff in <a href="https://github.com/step-security/action-markdownlint/compare/435ee62f0cde940687410a1a0456c29e97b70129...7eff996c965b6b4a8575f7971d970fc40479c321">compare view</a></li> </ul> </details> <br /> Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v4.2.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/572">docker/setup-buildx-action#572</a></li> <li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/551">docker/setup-buildx-action#551</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/557">docker/setup-buildx-action#557</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/580">docker/setup-buildx-action#580</a></li> <li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/573">docker/setup-buildx-action#573</a></li> <li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/576">docker/setup-buildx-action#576</a></li> <li>Bump js-yaml from 4.1.1 to 5.2.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/562">docker/setup-buildx-action#562</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/577">docker/setup-buildx-action#577</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/556">docker/setup-buildx-action#556</a></li> <li>Bump undici from 6.25.0 to 6.27.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/570">docker/setup-buildx-action#570</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/569">docker/setup-buildx-action#569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0">https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c"><code>bb05f3f</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/580">#580</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/321c814cb51fbe4af8eca00249525cc0973ea66f"><code>321c814</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/b9a36ef79ba42cfc611885a1e8c388fbf8b8cb3f"><code>b9a36ef</code></a> build(deps): bump <code>@​docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/ebeab241289497cd564ac98b3cfc9e64607bb276"><code>ebeab24</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/570">#570</a> from docker/dependabot/npm_and_yarn/undici-6.27.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/5c7b8ae78cec97a3215d4d86679b1d072eaa80cb"><code>5c7b8ae</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/037e618cd98e95e81525b15ff0e9c96f507e6a0e"><code>037e618</code></a> build(deps): bump undici from 6.25.0 to 6.27.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/66080e5802281ec2e72b7f3108915643e702db85"><code>66080e5</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/577">#577</a> from docker/dependabot/npm_and_yarn/sigstore-4.1.1</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/409aef0aa3f48f0a742e7dec4e0e04ab19afe93c"><code>409aef0</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/562">#562</a> from docker/dependabot/npm_and_yarn/js-yaml-4.2.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/49c6e42949280fa0d70fb327633591be54efbfb6"><code>49c6e42</code></a> build(deps): bump sigstore from 4.1.0 to 4.1.1</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/2211273e8121ecf9ecb7d6c7c0fcd55526d530c7"><code>2211273</code></a> [dependabot skip] chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c">compare view</a></li> </ul> </details> <br /> Updates `docker/login-action` from 4.2.0 to 4.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v4.4.0</h2> <ul> <li>Skip empty <code>registry-auth</code> secret mask by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1035">docker/login-action#1035</a></li> <li>Bump <code>@​aws-sdk/client-ecr</code> and <code>@​aws-sdk/client-ecr-public</code> to 3.1077.0 <a href="https://redirect.github.com/docker/login-action/pull/1034">docker/login-action#1034</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.3.0...v4.4.0">https://github.com/docker/login-action/compare/v4.3.0...v4.4.0</a></p> <h2>v4.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1022">docker/login-action#1022</a></li> <li>Bump <code>@​aws-sdk/client-ecr</code> and <code>@​aws-sdk/client-ecr-public</code> to 3.1076.0 <a href="https://redirect.github.com/docker/login-action/pull/999">docker/login-action#999</a> <a href="https://redirect.github.com/docker/login-action/pull/1030">docker/login-action#1030</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/login-action/pull/1004">docker/login-action#1004</a> <a href="https://redirect.github.com/docker/login-action/pull/1027">docker/login-action#1027</a></li> <li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/login-action/pull/1023">docker/login-action#1023</a></li> <li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1029">docker/login-action#1029</a></li> <li>Bump http-proxy-agent and https-proxy-agent to 9.1.0 in <a href="https://redirect.github.com/docker/login-action/pull/1017">docker/login-action#1017</a></li> <li>Bump js-yaml from 4.1.1 to 5.2.0 in <a href="https://redirect.github.com/docker/login-action/pull/1028">docker/login-action#1028</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1031">docker/login-action#1031</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/login-action/pull/1002">docker/login-action#1002</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/login-action/pull/1020">docker/login-action#1020</a></li> <li>Bump vite from 7.3.3 to 7.3.6 in <a href="https://redirect.github.com/docker/login-action/pull/1019">docker/login-action#1019</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.2.0...v4.3.0">https://github.com/docker/login-action/compare/v4.2.0...v4.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/af1e73f918a031802d376d3c8bbc3fe56130a9b0"><code>af1e73f</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1034">#1034</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li><a href="https://github.com/docker/login-action/commit/da722bde43bacb027adfc67d42dbaa4c0f9e550b"><code>da722bd</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/2916ad60bd5cb72f07aa54c69fdcc61749c09b7a"><code>2916ad6</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/ca0a662f786e4cfddce972005bd68f3dafc3a903"><code>ca0a662</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1035">#1035</a> from crazy-max/fix-registry-auth-empty-mask</li> <li><a href="https://github.com/docker/login-action/commit/c455755a579833bf0d2e4e54e3beb413ef10cc80"><code>c455755</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/48351901f89581a7c12870c787d3f06d1f498438"><code>4835190</code></a> skip empty registry-auth secret mask</li> <li><a href="https://github.com/docker/login-action/commit/992421c6e6806a7f6df609d1bfff374f9eca3004"><code>992421c</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1033">#1033</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/b249b43765525dd7951068267a34cf63f22ab4f0"><code>b249b43</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1032">#1032</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/1b67977736863551a88ff218642a2d7628b10520"><code>1b67977</code></a> build(deps): bump docker/bake-action from 7.2.0 to 7.3.0</li> <li><a href="https://github.com/docker/login-action/commit/9d49d6a3234c78daa10c3c12183ef7b6caa8e69e"><code>9d49d6a</code></a> build(deps): bump docker/bake-action/subaction/matrix</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0">compare view</a></li> </ul> </details> <br /> Updates `docker/metadata-action` from 6.1.0 to 6.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/metadata-action/releases">docker/metadata-action's releases</a>.</em></p> <blockquote> <h2>v6.2.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/metadata-action/pull/689">docker/metadata-action#689</a></li> <li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/663">docker/metadata-action#663</a></li> <li>Bump <code>@​actions/github</code> from 9.0.0 to 9.1.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/666">docker/metadata-action#666</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/672">docker/metadata-action#672</a> <a href="https://redirect.github.com/docker/metadata-action/pull/696">docker/metadata-action#696</a></li> <li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/690">docker/metadata-action#690</a></li> <li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/693">docker/metadata-action#693</a></li> <li>Bump csv-parse from 6.2.1 to 7.0.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/683">docker/metadata-action#683</a></li> <li>Bump js-yaml from 4.1.1 to 4.3.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/688">docker/metadata-action#688</a></li> <li>Bump moment-timezone from 0.6.1 to 0.6.2 in <a href="https://redirect.github.com/docker/metadata-action/pull/664">docker/metadata-action#664</a></li> <li>Bump semver from 7.7.4 to 7.8.5 in <a href="https://redirect.github.com/docker/metadata-action/pull/665">docker/metadata-action#665</a> <a href="https://redirect.github.com/docker/metadata-action/pull/695">docker/metadata-action#695</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/metadata-action/pull/694">docker/metadata-action#694</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/metadata-action/pull/673">docker/metadata-action#673</a></li> <li>Bump undici from 6.25.0 to 6.27.0 in <a href="https://redirect.github.com/docker/metadata-action/pull/686">docker/metadata-action#686</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/metadata-action/pull/685">docker/metadata-action#685</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/metadata-action/compare/v6.1.0...v6.2.0">https://github.com/docker/metadata-action/compare/v6.1.0...v6.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/metadata-action/commit/dc802804100637a589fabce1cb79ff13a1411302"><code>dc80280</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/696">#696</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/metadata-action/commit/2b9fe830efc58cb7b0fab7c94300b1afa01864db"><code>2b9fe83</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/8128ce30ab370fd360c8423698dcc077f2db8087"><code>8128ce3</code></a> chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li> <li><a href="https://github.com/docker/metadata-action/commit/1d1c89551edb081628e818368680beffb2bbccee"><code>1d1c895</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/695">#695</a> from docker/dependabot/npm_and_yarn/semver-7.8.5</li> <li><a href="https://github.com/docker/metadata-action/commit/7f0c2dd4c83ea6258f78bf2fc6a02908417518ad"><code>7f0c2dd</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/694">#694</a> from docker/dependabot/npm_and_yarn/sigstore-4.1.1</li> <li><a href="https://github.com/docker/metadata-action/commit/025f8c5c8167edab853571a387d8e80ccc1e91ed"><code>025f8c5</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/metadata-action/commit/e98d63c3081990566e174100a3afaa97aefbbcf3"><code>e98d63c</code></a> chore(deps): Bump semver from 7.8.1 to 7.8.5</li> <li><a href="https://github.com/docker/metadata-action/commit/37d93799507b94cf1c1885efd7278d52a0fb806a"><code>37d9379</code></a> chore(deps): Bump sigstore from 4.1.0 to 4.1.1</li> <li><a href="https://github.com/docker/metadata-action/commit/a1b80728476a956a25c5eeaff91c4dc46e7ac1bc"><code>a1b8072</code></a> Merge pull request <a href="https://redirect.github.com/docker/metadata-action/issues/690">#690</a> from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1</li> <li><a href="https://github.com/docker/metadata-action/commit/e0e338106d6ae0da5b44537049a34620b3559a5c"><code>e0e3381</code></a> [dependabot skip] chore: update generated content</li> <li>Additional commits viewable in <a href="https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302">compare view</a></li> </ul> </details> <br /> Updates `docker/build-push-action` from 7.2.0 to 7.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v7.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1567">docker/build-push-action#1567</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1545">docker/build-push-action#1545</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1572">docker/build-push-action#1572</a></li> <li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1568">docker/build-push-action#1568</a></li> <li>Bump js-yaml from 4.1.1 to 4.3.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1566">docker/build-push-action#1566</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/build-push-action/pull/1547">docker/build-push-action#1547</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1564">docker/build-push-action#1564</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1563">docker/build-push-action#1563</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0">https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a"><code>53b7df9</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1572">#1572</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/154298c1ca89be1c0e019084f0611ddca621aafc"><code>154298c</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/cb1238b9c9eb453d106b4e4142a5bd9cde710040"><code>cb1238b</code></a> chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li> <li><a href="https://github.com/docker/build-push-action/commit/24f845d5cbe75d2d350a984fd0e18cb7a3f29c1c"><code>24f845d</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1566">#1566</a> from docker/dependabot/npm_and_yarn/js-yaml-4.2.0</li> <li><a href="https://github.com/docker/build-push-action/commit/9c6973007b52c322651c38915d5e8824cea95c50"><code>9c69730</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/bc3a3a5f72a6dca16c2c2468d1dfc55ee66d2193"><code>bc3a3a5</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1574">#1574</a> from docker/dependabot/github_actions/aws-actions/co...</li> <li><a href="https://github.com/docker/build-push-action/commit/a82c504a2387bb8bedc50072f9c554ae2a7dab5d"><code>a82c504</code></a> chore(deps): Bump js-yaml from 4.1.1 to 4.3.0</li> <li><a href="https://github.com/docker/build-push-action/commit/0285a75190c039d6dac52b7711abcef3f5d8f6f6"><code>0285a75</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1573">#1573</a> from docker/dependabot/github_actions/actions/cache-...</li> <li><a href="https://github.com/docker/build-push-action/commit/c6ad2a3f9644680619de938b97c8a10a87b2a88d"><code>c6ad2a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1575">#1575</a> from docker/dependabot/github_actions/actions/checko...</li> <li><a href="https://github.com/docker/build-push-action/commit/d37484fb9737c5442a257e2f0ae5a8d756ed7d92"><code>d37484f</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1564">#1564</a> from docker/dependabot/npm_and_yarn/undici-6.27.0</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/f9f3042f7e2789586610d6e8b85c8f03e5195baf...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a">compare view</a></li> </ul> </details> <br /> Updates `release-plz/action` from 0.5.129 to 0.5.130 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/release-plz/action/releases">release-plz/action's releases</a>.</em></p> <blockquote> <h2>v0.5.130</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): lock file maintenance by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/398">release-plz/action#398</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.77.5 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/399">release-plz/action#399</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.77.6 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/400">release-plz/action#400</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.77.7 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/401">release-plz/action#401</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.78.0 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/402">release-plz/action#402</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.78.1 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/403">release-plz/action#403</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.78.2 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/404">release-plz/action#404</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.78.3 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/405">release-plz/action#405</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.0 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/406">release-plz/action#406</a></li> <li>chore(deps): lock file maintenance by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/407">release-plz/action#407</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.1 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/408">release-plz/action#408</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.2 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/409">release-plz/action#409</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.3 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/410">release-plz/action#410</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.4 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/411">release-plz/action#411</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.5 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/412">release-plz/action#412</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.6 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/413">release-plz/action#413</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.7 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/414">release-plz/action#414</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.8 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/415">release-plz/action#415</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.9 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/416">release-plz/action#416</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.10 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/417">release-plz/action#417</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.11 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/418">release-plz/action#418</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.12 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/419">release-plz/action#419</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.13 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/420">release-plz/action#420</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.14 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/421">release-plz/action#421</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.79.15 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/422">release-plz/action#422</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.80.0 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/423">release-plz/action#423</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.0 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/425">release-plz/action#425</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.1 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/426">release-plz/action#426</a></li> <li>chore(deps): update dependency obi1kenobi/cargo-semver-checks to v0.48 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/424">release-plz/action#424</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.2 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/428">release-plz/action#428</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.3 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/429">release-plz/action#429</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.4 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/430">release-plz/action#430</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.5 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/431">release-plz/action#431</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.6 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/432">release-plz/action#432</a></li> <li>chore(deps): update github actions to v6.0.3 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/385">release-plz/action#385</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.7 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/433">release-plz/action#433</a></li> <li>chore(deps): lock file maintenance by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/435">release-plz/action#435</a></li> <li>chore(deps): update dependency taiki-e/install-action to v2.81.8 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/436">release-plz/action#436</a></li> <li>chore(deps): update dependency cargo-bins/cargo-binstall to v1.20.0 by <a href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in <a href="https://redirect.github.com/release-plz/action/pull/437">release-plz/action#437</a></li> <li>don't threat http 422 errors as special by <a href="https://github.com/marcoieni"><code>@​marcoieni</code></a> in <a href="https://redirect.github.com/release-plz/action/pull/438">release-plz/action#438</a></li> <li>Update to 0.3.159 by <a href="https://github.com/marcoieni"><code>@​marcoieni</code></a> in <a href="https://redirect.github.com/release-plz/action/pull/439">release-plz/action#439</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/release-plz/action/compare/v0.5...v0.5.130">https://github.com/release-plz/action/compare/v0.5...v0.5.130</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/release-plz/action/commit/e8792575c7f2366cf6ff3ccc33ead9ace5b691c7"><code>e879257</code></a> Update to 0.3.159 (<a href="https://redirect.github.com/release-plz/action/issues/439">#439</a>)</li> <li><a href="https://github.com/release-plz/action/commit/29ecf01eca4b77478f0ca7e92381fa8ed3dcb2d7"><code>29ecf01</code></a> don't threat http 422 errors as special (<a href="https://redirect.github.com/release-plz/action/issues/438">#438</a>)</li> <li><a href="https://github.com/release-plz/action/commit/c6756a4e52ecd442e0dc3933668ef337412ee9ee"><code>c6756a4</code></a> chore(deps): update dependency cargo-bins/cargo-binstall to v1.20.0 (<a href="https://redirect.github.com/release-plz/action/issues/437">#437</a>)</li> <li><a href="https://github.com/release-plz/action/commit/0c186bf57f2ad9878af0a174b355adf772e5f5b4"><code>0c186bf</code></a> chore(deps): update dependency taiki-e/install-action to v2.81.8 (<a href="https://redirect.github.com/release-plz/action/issues/436">#436</a>)</li> <li><a href="https://github.com/release-plz/action/commit/8fe2bb58a3b79d70a863329bbf3e808de630dbe9"><code>8fe2bb5</code></a> chore(deps): lock file maintenance (<a href="https://redirect.github.com/release-plz/action/issues/435">#435</a>)</li> <li><a href="https://github.com/release-plz/action/commit/675b30f4839ecacdeb26f54b3619d0ca19fbc512"><code>675b30f</code></a> chore(deps): update dependency taiki-e/install-action to v2.81.7 (<a href="https://redirect.github.com/release-plz/action/issues/433">#433</a>)</li> <li><a href="https://github.com/release-plz/action/commit/7f61f6361c02d8eaa6d3a1fd3f10d8ea2737c919"><code>7f61f63</code></a> chore(deps): update github actions to v6.0.3 (<a href="https://redirect.github.com/release-plz/action/issues/385">#385</a>)</li> <li><a href="https://github.com/release-plz/action/commit/76003669ecf64a5dc916a50f1421c39f84178e9c"><code>7600366</code></a> chore(deps): update dependency taiki-e/install-action to v2.81.6 (<a href="https://redirect.github.com/release-plz/action/issues/432">#432</a>)</li> <li><a href="https://github.com/release-plz/action/commit/f983e756e04c6d365a455be4ac63e08d0bf3d557"><code>f983e75</code></a> chore(deps): update dependency taiki-e/install-action to v2.81.5 (<a href="https://redirect.github.com/release-plz/action/issues/431">#431</a>)</li> <li><a href="https://github.com/release-plz/action/commit/02994cebc94808c482f8dddfeab958df210c0658"><code>02994ce</code></a> chore(deps): update dependency taiki-e/install-action to v2.81.4 (<a href="https://redirect.github.com/release-plz/action/issues/430">#430</a>)</li> <li>Additional commits viewable in <a href="https://github.com/release-plz/action/compare/064f4d1e36c843611ddf013be726beaa4ad804db...e8792575c7f2366cf6ff3ccc33ead9ace5b691c7">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 0125abe commit 6316544

5 files changed

Lines changed: 26 additions & 26 deletions

File tree

‎.github/workflows/ci-code.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: harden runner
17-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
17+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
1818
with:
1919
egress-policy: audit
2020

2121
- name: checkout repository
22-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
22+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2323
with:
2424
submodules: recursive
2525
persist-credentials: false
@@ -40,12 +40,12 @@ jobs:
4040
name: 'Full build linux-${{ matrix.platform.arch }}'
4141
steps:
4242
- name: harden runner
43-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
43+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
4444
with:
4545
egress-policy: audit
4646

4747
- name: checkout repository
48-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
48+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
4949
with:
5050
submodules: recursive
5151
persist-credentials: false
@@ -64,12 +64,12 @@ jobs:
6464
name: 'Full clippy linux-${{ matrix.arch }}'
6565
steps:
6666
- name: harden runner
67-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
67+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
6868
with:
6969
egress-policy: audit
7070

7171
- name: checkout repository
72-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
72+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
7373
with:
7474
submodules: recursive
7575
persist-credentials: false

‎.github/workflows/digestabot.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,11 @@ jobs:
2121

2222
steps:
2323
- name: Harden the runner (Audit all outbound calls)
24-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
24+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
2525
with:
2626
egress-policy: audit
2727

28-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.0
28+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4.2.0
2929
with:
3030
persist-credentials: false
3131

@@ -36,7 +36,7 @@ jobs:
3636
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
3737
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
3838

39-
- uses: chainguard-dev/digestabot@afe360aa3b0c29d88844138e8fa0349384398967 # a110b65f3d4742d56b5b2b2306de6e2e54306724
39+
- uses: chainguard-dev/digestabot@33d0b78e580aa0c83fe188eb3dfad6611b662479 # a110b65f3d4742d56b5b2b2306de6e2e54306724
4040
with:
4141
token: "${{ steps.generate-token.outputs.token }}"
4242
signoff: true

‎.github/workflows/markdown-lint.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,11 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden runner
20-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
20+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
2121
with:
2222
egress-policy: audit
2323

24-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
24+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
2525
with:
2626
fetch-depth: 0
2727
persist-credentials: true
@@ -34,7 +34,7 @@ jobs:
3434
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
3535

3636
- name: markdownlint
37-
uses: step-security/action-markdownlint@435ee62f0cde940687410a1a0456c29e97b70129
37+
uses: step-security/action-markdownlint@7eff996c965b6b4a8575f7971d970fc40479c321
3838
with:
3939
GITHUB_TOKEN: "${{ steps.generate-token.outputs.token }}"
4040
reporter: github-pr-review

‎.github/workflows/release-artifacts.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -39,30 +39,30 @@ jobs:
3939

4040
steps:
4141
- name: 'Harden runner'
42-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
42+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
4343
with:
4444
egress-policy: audit
4545

4646
- name: 'Checkout repository'
47-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.0
47+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4.2.0
4848
with:
4949
submodules: recursive
5050
persist-credentials: false
5151

5252
- name: 'Setup docker buildx'
53-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
53+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
5454
with:
5555
cache-binary: false
5656

5757
- name: 'Login to ghcr'
58-
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
58+
uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
5959
with:
6060
registry: ghcr.io
6161
username: '${{ github.actor }}'
6262
password: '${{ github.token }}'
6363

6464
- name: Docker meta
65-
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
65+
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
6666
id: meta
6767
with:
6868
images: |
@@ -85,7 +85,7 @@ jobs:
8585
type=schedule,pattern=nightly
8686
8787
- name: 'Docker build and push ${{ matrix.component }}'
88-
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
88+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
8989
id: push
9090
with:
9191
file: images/Containerfile.edera-check
@@ -128,12 +128,12 @@ jobs:
128128
runs-on: '${{ matrix.platform.on }}'
129129
steps:
130130
- name: Harden the runner (Audit all outbound calls)
131-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
131+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
132132
with:
133133
egress-policy: audit
134134

135135
- name: Checkout repository
136-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
136+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
137137
with:
138138
fetch-depth: 0
139139
persist-credentials: false

‎.github/workflows/release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121
id-token: write # Needed for trusted publishing
2222
steps:
2323
- name: Harden the runner (Audit all outbound calls)
24-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
24+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
2525
with:
2626
egress-policy: audit
2727

2828
- name: Checkout repository
29-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
29+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3030
with:
3131
fetch-depth: 0
3232
persist-credentials: false
@@ -42,7 +42,7 @@ jobs:
4242
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
4343

4444
- name: Run release-plz
45-
uses: release-plz/action@064f4d1e36c843611ddf013be726beaa4ad804db # v0.5
45+
uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5
4646
with:
4747
command: release
4848
env:
@@ -62,12 +62,12 @@ jobs:
6262
cancel-in-progress: false
6363
steps:
6464
- name: Harden the runner (Audit all outbound calls)
65-
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
65+
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
6666
with:
6767
egress-policy: audit
6868

6969
- name: Checkout repository
70-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
70+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
7171
with:
7272
fetch-depth: 0
7373
persist-credentials: false
@@ -83,7 +83,7 @@ jobs:
8383
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
8484

8585
- name: Run release-plz
86-
uses: release-plz/action@064f4d1e36c843611ddf013be726beaa4ad804db # v0.5
86+
uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5
8787
with:
8888
command: release-pr
8989
env:

0 commit comments

Comments
 (0)