chore(deps): update all non-major dependencies #69

renovate · 2024-08-23T23:27:20Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.1.7` -> `v4.2.2`
actions/setup-go	action	minor	`v5.0.2` -> `v5.1.0`
alpine	final	patch	`3.20.2` -> `3.20.3`
alpine	stage	patch	`3.20.2` -> `3.20.3`
cli/cli		minor	`2.55.0` -> `2.60.1`
codecov/codecov-action	action	minor	`v4.5.0` -> `v4.6.0`
github.com/Masterminds/semver/v3	require	minor	`v3.2.1` -> `v3.3.0`
github.com/go-vela/types	require	minor	`v0.24.0` -> `v0.25.1`
github.com/urfave/cli/v2	require	patch	`v2.27.4` -> `v2.27.5`
github/codeql-action	action	minor	`v3.26.4` -> `v3.27.0`

Release Notes

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-go (actions/setup-go)

`v5.1.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-go/pull/500
Upgrade IA Publish by @Jcambass in https://github.com/actions/setup-go/pull/502
Add architecture to cache key by @Zxilly in https://github.com/actions/setup-go/pull/493
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Enhance workflows and Upgrade micromatch Dependency by @priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

Revise isGhes logic by @jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

@Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
@Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
@jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
@priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

cli/cli (cli/cli)

`v2.60.1`: GitHub CLI 2.60.1

Compare Source

This is a small patch release to fix installing gh via go install which was broken with v2.60.0.

What's Changed

Update testscript to use hard fork by @williammartin in https://github.com/cli/cli/pull/9821

Full Changelog: cli/cli@v2.60.0...v2.60.1

`v2.60.0`: GitHub CLI 2.60.0

Compare Source

What's Changed

Add ArchivedAt field by @tsukasaI in https://github.com/cli/cli/pull/9790
Include startedAt, completedAt in run steps data by @andyfeller in https://github.com/cli/cli/pull/9774
Adjust environment help for host and tokens by @williammartin in https://github.com/cli/cli/pull/9809
Add handling of empty titles for Issues and PRs by @jtmcg in https://github.com/cli/cli/pull/9701
LiveSigstoreVerifier.Verify should error if no attestations are present by @phillmv in https://github.com/cli/cli/pull/9742
gh at verify retries fetching attestations if it receives a 5xx by @phillmv in https://github.com/cli/cli/pull/9797
Prevent local extension installations with invalid names and conflicts with core commands and other extensions by @BagToad in https://github.com/cli/cli/pull/9794
Rewrite a sentence in CONTRIBUTING.md by @muzimuzhi in https://github.com/cli/cli/pull/9772
Use new GitHub preview terms in working-with-us.md by @BagToad in https://github.com/cli/cli/pull/9800
Use new GitHub previews terminology in attestation commands' help docs by @BagToad in https://github.com/cli/cli/pull/9799
Clarify in README that gh is supported on GitHub Enterprise Cloud by @BagToad in https://github.com/cli/cli/pull/9805
build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6 by @dependabot in https://github.com/cli/cli/pull/9752

Acceptance Test Changes

Add acceptance tests for workflow, run, and cache commands by @BagToad in https://github.com/cli/cli/pull/9766
Add basic api acceptance tests by @BagToad in https://github.com/cli/cli/pull/9770
Add acceptance tests for release commands by @BagToad in https://github.com/cli/cli/pull/9771
Add acceptance tests for org and ssh-key commands by @BagToad in https://github.com/cli/cli/pull/9812
Add acceptance tests for gh auth commands by @jtmcg in https://github.com/cli/cli/pull/9787
Add acceptance tests for repo commands by @jtmcg in https://github.com/cli/cli/pull/9783
Add acceptance tests for search command by @BagToad in https://github.com/cli/cli/pull/9786
Add acceptance tests for variable commands by @andyfeller in https://github.com/cli/cli/pull/978
Add testscripts for gpg-key and label commands by @williammartin in https://github.com/cli/cli/pull/9811
Use forked testscript for token redaction by @williammartin in https://github.com/cli/cli/pull/9804
Add acceptance tests for secret commands by @andyfeller in https://github.com/cli/cli/pull/9782
Note token redaction in Acceptance test README by @williammartin in https://github.com/cli/cli/pull/9813

New Contributors

@tsukasaI made their first contribution in https://github.com/cli/cli/pull/9790

Full Changelog: cli/cli@v2.59.0...v2.60.0

`v2.59.0`: GitHub CLI 2.59.0

Compare Source

What's Changed

Allow community submitted design work by @BagToad in https://github.com/cli/cli/pull/9683
Improve SECURITY.md with expectations for privately reported vulnerabilities by @BagToad in https://github.com/cli/cli/pull/9687
Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS device by @timrogers in https://github.com/cli/cli/pull/9650
Print the login URL even when opening a browser by @ulfjack in https://github.com/cli/cli/pull/7091
configurable maxwidth for markdown WithWrap() by @smemsh in https://github.com/cli/cli/pull/9626
Handle errors when parsing hostname in auth flow by @BagToad in https://github.com/cli/cli/pull/9729
Add repo license list/view and repo gitignore list/view by @BagToad in https://github.com/cli/cli/pull/9721
Introduce testscript acceptance tests generally, and for the PR command specifically by @williammartin in https://github.com/cli/cli/pull/9745
Support GH_ACCEPTANCE_SCRIPT env var to target a single script by @williammartin in https://github.com/cli/cli/pull/9756
Ensure Acceptance defer failures are debuggable by @williammartin in https://github.com/cli/cli/pull/9754
Add acceptance task to makefile by @williammartin in https://github.com/cli/cli/pull/9748
Add Acceptance tests for issue command by @williammartin in https://github.com/cli/cli/pull/9757
Update IsEnterprise and IsTenancy for orthogonality using go-gh by @jtmcg in https://github.com/cli/cli/pull/9755
Supporting filtering on gist list by @heaths in https://github.com/cli/cli/pull/9728

New Contributors

@ulfjack made their first contribution in https://github.com/cli/cli/pull/7091
@smemsh made their first contribution in https://github.com/cli/cli/pull/9626

Full Changelog: cli/cli@v2.58.0...v2.59.0

`v2.58.0`: GitHub CLI 2.58.0

Compare Source

What's Changed

Better messaging for attestation verify custom issuer mismatch error by @bdehamer in https://github.com/cli/cli/pull/9616
Enhance gh repo create docs, fix random cmd link by @andyfeller in https://github.com/cli/cli/pull/9630
Add HasActiveToken method to AuthConfig to refactor auth check for attestation trusted-root command by @BagToad in https://github.com/cli/cli/pull/9635
Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform by @timrogers in https://github.com/cli/cli/pull/9608
Disable auth check for attestation trusted-root command by @bdehamer in https://github.com/cli/cli/pull/9610
build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4 by @dependabot in https://github.com/cli/cli/pull/9645
Fix tenant-awareness for trusted-root command by @bdehamer in https://github.com/cli/cli/pull/9638
Replace "GitHub Enterprise Server" option with "other" in gh auth login prompting by @jtmcg in https://github.com/cli/cli/pull/9642
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5 by @dependabot in https://github.com/cli/cli/pull/9634
Add dnf5 instructions to docs/install_linux.md by @its-miroma in https://github.com/cli/cli/pull/9660
build(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 by @dependabot in https://github.com/cli/cli/pull/9688

New Contributors

@its-miroma made their first contribution in https://github.com/cli/cli/pull/9660

Full Changelog: cli/cli@v2.57.0...v2.58.0

`v2.57.0`: GitHub CLI 2.57.0

Compare Source

What's Changed

Move non-integration tests to different test file by @codysoyland in https://github.com/cli/cli/pull/9577
Added tenancy aware attestation commands by @kommendorkapten in https://github.com/cli/cli/pull/9542
Added --active flag to the gh auth status command by @velumuruganr in https://github.com/cli/cli/pull/9520
build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2 by @dependabot in https://github.com/cli/cli/pull/9601
gh attestation verify test for custom OIDC issuers by @bdehamer in https://github.com/cli/cli/pull/9595
Suggest installing Rosetta when extension installation fails due to missing darwin-arm64 binary, but a darwin-amd64 binary is available by @timrogers in https://github.com/cli/cli/pull/9599
Update gh attestation verify bundle parsing and validation errors by @malancas in https://github.com/cli/cli/pull/9564
Suppress attestation verify output when no TTY present by @bdehamer in https://github.com/cli/cli/pull/9612
Use api subdomains for tenant hosts by @williammartin in https://github.com/cli/cli/pull/9618

New Contributors

@kommendorkapten made their first contribution in https://github.com/cli/cli/pull/9542
@velumuruganr made their first contribution in https://github.com/cli/cli/pull/9520
@bdehamer made their first contribution in https://github.com/cli/cli/pull/9595
@timrogers made their first contribution in https://github.com/cli/cli/pull/9599

Full Changelog: cli/cli@v2.56.0...v2.57.0

`v2.56.0`: GitHub CLI 2.56.0

Compare Source

Important note about renewed GPG key

The Debian and RedHat releases have been signed with a new GPG key. If you are experiencing issues updating your .deb or .rpm packages, please read cli/cli#9569.

What's Changed

Always print URL scheme to stdout by @heaths in https://github.com/cli/cli/pull/9471
Quote repo names consistently in gh repo sync stdout by @muzimuzhi in https://github.com/cli/cli/pull/9491
Fetch bundle from OCI registry for verify by @ejahnGithub in https://github.com/cli/cli/pull/9421
Remove Internal from gh repo create prompt when owner is not an org by @jtmcg in https://github.com/cli/cli/pull/9465
Drop surplus trailing space char in flag names in web by @muzimuzhi in https://github.com/cli/cli/pull/9495
fix the trimming of log filenames for gh run view by @benebsiny in https://github.com/cli/cli/pull/9482
"offline" verification using the bundle of attestations without any additional handling of the file by @aryanbhosale in https://github.com/cli/cli/pull/9523
build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @dependabot in https://github.com/cli/cli/pull/9518
Fix doc typo for repo sync by @muzimuzhi in https://github.com/cli/cli/pull/9509
Correct the help message for -F by @Goooler in https://github.com/cli/cli/pull/9525
chore: fix some function names by @crystalstall in https://github.com/cli/cli/pull/9555
verify 2nd artifact without swapping order by @aryanbhosale in https://github.com/cli/cli/pull/9532
gh attestation verify handles empty JSONL files by @malancas in https://github.com/cli/cli/pull/9541
Enhance Linux installation docs to redirect users to GPG renewal issue, better troubleshooting support by @andyfeller in https://github.com/cli/cli/pull/9573
Upgrade sigstore-go to v0.6.1 by @codysoyland in https://github.com/cli/cli/pull/9566
Check for nil values to prevent nil dereference panic by @codysoyland in https://github.com/cli/cli/pull/9578
build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @dependabot in https://github.com/cli/cli/pull/9575

New Contributors

@aryanbhosale made their first contribution in https://github.com/cli/cli/pull/9523
@Goooler made their first contribution in https://github.com/cli/cli/pull/9525
@crystalstall made their first contribution in https://github.com/cli/cli/pull/9555

Full Changelog: cli/cli@v2.55.0...v2.56.0

codecov/codecov-action (codecov/codecov-action)

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.3.0`

Compare Source

What's Changed

Fix: bad package in README by @sdelicata in https://github.com/Masterminds/semver/pull/226
Updating the GitHub Actions and versions of Go used by @mattfarina in https://github.com/Masterminds/semver/pull/229
Fix spelling in README by @robinschneider in https://github.com/Masterminds/semver/pull/222
Adding go build cache to fuzz output by @mattfarina in https://github.com/Masterminds/semver/pull/232
Add caching to fuzz testing by @mattfarina in https://github.com/Masterminds/semver/pull/234
updating github actions by @mattfarina in https://github.com/Masterminds/semver/pull/235
feat: nil version equality by @KnutZuidema in https://github.com/Masterminds/semver/pull/213
add >= and <= by @grosser in https://github.com/Masterminds/semver/pull/238
doc: hyphen range constraint without whitespace by @johnnychen94 in https://github.com/Masterminds/semver/pull/216
Removing reference to vert by @mattfarina in https://github.com/Masterminds/semver/pull/245
simplify StrictNewVersion by @grosser in https://github.com/Masterminds/semver/pull/241
Updating the testing version of Go used by @mattfarina in https://github.com/Masterminds/semver/pull/246
bumping min version in go.mod based on what's tested by @mattfarina in https://github.com/Masterminds/semver/pull/248
Updating changelog for 3.3.0 by @mattfarina in https://github.com/Masterminds/semver/pull/249

New Contributors

@sdelicata made their first contribution in https://github.com/Masterminds/semver/pull/226
@robinschneider made their first contribution in https://github.com/Masterminds/semver/pull/222
@KnutZuidema made their first contribution in https://github.com/Masterminds/semver/pull/213
@grosser made their first contribution in https://github.com/Masterminds/semver/pull/238
@johnnychen94 made their first contribution in https://github.com/Masterminds/semver/pull/216

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

go-vela/types (github.com/go-vela/types)

`v0.25.1`

Compare Source

What's Changed

chore: update schema, go, and deps for patch release by @ecrupper in https://github.com/go-vela/types/pull/396

Full Changelog: go-vela/types@v0.25.0...v0.25.1

`v0.25.0`

Compare Source

What's Changed

fix(swagger): remove old model annotations by @wass3r in https://github.com/go-vela/types/pull/385
feat(rulesets): add instance key to ruleset by @wsan3 in https://github.com/go-vela/types/pull/384
enhance(secrets): uppercase secret target by @ecrupper in https://github.com/go-vela/types/pull/387
fix(yaml): remediate insecure/archived buildkite lib in favor of go-yaml v3 by @ecrupper in https://github.com/go-vela/types/pull/386
fix: update doc links by @wass3r in https://github.com/go-vela/types/pull/388
chore: re-enable go fix; deprecate library.Hook; bump go by @wass3rw3rk in https://github.com/go-vela/types/pull/389
chore(deps): update all non-major dependencies by @renovate in https://github.com/go-vela/types/pull/383
fix(revert): use buildkite as yaml parser by @ecrupper in https://github.com/go-vela/types/pull/392
chore(deps): update all non-major dependencies by @renovate in https://github.com/go-vela/types/pull/390
chore(deps): update all non-major dependencies by @renovate in https://github.com/go-vela/types/pull/393

Full Changelog: go-vela/types@v0.24.0...v0.25.0

urfave/cli (github.com/urfave/cli/v2)

`v2.27.5`

Compare Source

What's Changed

docs(flag): add UseShortOptionHandling description by @BlackHole1 in https://github.com/urfave/cli/pull/1956
[Backport] Fix: Use $0 env var to correctly retrieve the current active shell by @asahasrabuddhe in https://github.com/urfave/cli/pull/1970
Update dependencies in v2-maint by @meatballhat in https://github.com/urfave/cli/pull/1980

Full Changelog: urfave/cli@v2.27.4...v2.27.5

github/codeql-action (github/codeql-action)

`v3.27.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024

Bump the minimum CodeQL bundle version to 2.14.6. #2549
Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.

`v3.26.13`

Compare Source

`v3.26.12`

Compare Source

`v3.26.11`

Compare Source

`v3.26.10`

Compare Source

`v3.26.9`

Compare Source

`v3.26.8`

Compare Source

`v3.26.7`

Compare Source

`v3.26.6`

Compare Source

[`v3.26.5`](https://redirect.github.com/git

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2024-10-02T18:13:18Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.0` -> `1.23.2`
`github.com/cpuguy83/go-md2man/v2`	`v2.0.4` -> `v2.0.5`
`golang.org/x/crypto`	`v0.21.0` -> `v0.24.0`
`golang.org/x/net`	`v0.23.0` -> `v0.26.0`
`golang.org/x/sync`	`v0.5.0` -> `v0.7.0`
`golang.org/x/sys`	`v0.18.0` -> `v0.21.0`
`golang.org/x/text`	`v0.14.0` -> `v0.16.0`

renovate bot requested a review from a team as a code owner August 23, 2024 23:27

renovate bot added the dependencies Indicates a change to dependencies label Aug 23, 2024

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 1af16b0 to babdf91 Compare August 28, 2024 00:26

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.26.5~~ fix(deps): update all non-major dependencies Aug 28, 2024

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from babdf91 to 99903b4 Compare August 29, 2024 14:13

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 99903b4 to 9a55437 Compare September 6, 2024 22:55

renovate bot changed the title ~~fix(deps): update all non-major dependencies~~ chore(deps): update all non-major dependencies Sep 6, 2024

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 44553a9 to 42dd2b8 Compare September 13, 2024 13:59

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from af132e1 to 86d5603 Compare September 19, 2024 14:18

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from 3ee387a to 46c07b0 Compare October 1, 2024 16:43

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 35f9285 to 893b464 Compare October 2, 2024 18:13

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 0e67763 to 9070087 Compare October 7, 2024 18:38

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 1f0599c to b4b2b02 Compare October 16, 2024 13:13

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from dfc3a26 to a3d9a72 Compare October 24, 2024 17:30

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from a3d9a72 to 085d302 Compare October 24, 2024 19:14

chore(deps): update all non-major dependencies

2c87214

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 085d302 to 2c87214 Compare October 25, 2024 18:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies #69

chore(deps): update all non-major dependencies #69

renovate bot commented Aug 23, 2024 •

edited

Loading

renovate bot commented Oct 2, 2024 •

edited

Loading

chore(deps): update all non-major dependencies #69

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #69

Conversation

renovate bot commented Aug 23, 2024 • edited Loading

Release Notes

What's Changed

New Contributors

v2.60.1: GitHub CLI 2.60.1

What's Changed

v2.60.0: GitHub CLI 2.60.0

What's Changed

Acceptance Test Changes

New Contributors

v2.59.0: GitHub CLI 2.59.0

What's Changed

New Contributors

v2.58.0: GitHub CLI 2.58.0

What's Changed

New Contributors

v2.57.0: GitHub CLI 2.57.0

What's Changed

New Contributors

v2.56.0: GitHub CLI 2.56.0

Important note about renewed GPG key

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

CodeQL Action Changelog

3.27.0 - 22 Oct 2024

[v3.26.5](https://redirect.github.com/git

Configuration

renovate bot commented Oct 2, 2024 • edited Loading

ℹ Artifact update notice

File name: go.mod

renovate bot commented Aug 23, 2024 •

edited

Loading

`v2.60.1`: GitHub CLI 2.60.1

`v2.60.0`: GitHub CLI 2.60.0

`v2.59.0`: GitHub CLI 2.59.0

`v2.58.0`: GitHub CLI 2.58.0

`v2.57.0`: GitHub CLI 2.57.0

`v2.56.0`: GitHub CLI 2.56.0

[`v3.26.5`](https://redirect.github.com/git

renovate bot commented Oct 2, 2024 •

edited

Loading