chore(deps): update all dependencies - #7
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all
branch
7 times, most recently
from
January 28, 2025 00:32
6646661 to
c1e15f2
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
January 29, 2025 20:56
47a5f00 to
ffbfab6
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
February 7, 2025 12:27
ffbfab6 to
1328898
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
February 21, 2025 19:59
1328898 to
2ffa5c9
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
March 7, 2025 18:11
2ffa5c9 to
b9167a3
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
March 24, 2025 20:07
7ee8513 to
4b9eeac
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
April 7, 2025 23:03
3b1f5cb to
43f7966
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
April 23, 2025 13:01
43f7966 to
5875fbe
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
May 8, 2025 19:30
00c2659 to
3464330
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
May 16, 2025 12:57
c6214e1 to
15c9d9b
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
June 3, 2025 14:29
15c9d9b to
9d0183e
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
June 11, 2025 19:40
9d0183e to
1a22864
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
June 30, 2025 13:45
e412c01 to
5926605
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
July 21, 2025 20:03
5926605 to
ee21f2c
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
September 5, 2025 12:57
1446792 to
9860a8a
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
September 10, 2025 22:39
46154d3 to
d2dba84
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
October 2, 2025 15:40
2d370f9 to
8168e4a
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
October 11, 2025 00:40
39194d3 to
c596224
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
October 24, 2025 19:38
560ed66 to
fde1ab8
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
October 30, 2025 17:43
d40221c to
cc54bdd
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
November 14, 2025 00:13
f3c61e8 to
9398ccd
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
November 24, 2025 10:39
0f75785 to
6883901
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
December 5, 2025 17:26
0134340 to
331545e
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
December 17, 2025 02:24
2eb59f8 to
31cb327
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.2→v7.0.1v4.5.0→v5.0.0v5.2.0→v7.0.0v3.28.0→v4.37.7Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
v7.0.0Compare Source
v7Compare Source
v6.1.0Compare Source
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.1.0Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
v5Compare Source
v4.4.0Compare Source
v4.3.1Compare Source
v4.3.0Compare Source
actions/dependency-review-action (actions/dependency-review-action)
v5.0.0: 5.0.0Compare Source
This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0
v4.9.0: Dependency Review Action 4.9.0Compare Source
This feature release contains a couple of notable changes:
show_patched_versionswhich will add a column to the output, showing the fix version of each vulnerable dependency. Thanks @felickz!allow-package-dependencylists, including case (in)sensitivity and url-encoded namespaces Thanks @juxtin!What's Changed
Patched VersiontoVulnerabilitiessummary by @felickz in #1045New Contributors
Full Changelog: actions/dependency-review-action@v4.8.3...v4.9.0
v4.8.3: 4.8.3Compare Source
Dependency Review Action v4.8.3
This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.
We have also updated the release process to use a long-lived
v4branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.What's Changed
Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3
v4.8.2Compare Source
Minor fixes:
v4.8.1: Dependency Review Action v4.8.1Compare Source
What's Changed
Full Changelog: actions/dependency-review-action@v4...v4.8.1
v4.8.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4...v4.8.0
v4.7.4Compare Source
v4.7.3: 4.7.3Compare Source
What's Changed
Full Changelog: actions/dependency-review-action@v4...v4.7.3
v4.7.2: 4.7.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4...v4.7.2
v4.7.1Compare Source
allow-dependencies-licenseswill be allowed even if the package in question has no license information #889Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g.Ruby)v4.7.0Compare Source
MIT AND GPL-2.0) in allow lists (fixes #809 and probably others)OTHERin package licenses withLicenseRef-clearlydefined-OTHERso that parsing passesv4.6.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0
actions/setup-go (actions/setup-go)
v7.0.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-go@v6...v7.0.0
v7Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
What's Changed
Enhancement
Dependency update
Documentation update
New Contributors
Full Changelog: actions/setup-go@v6...v6.4.0
v6.3.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v6...v6.3.0
v6.2.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancements
Dependency updates
New Contributors
Full Changelog: actions/setup-go@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
form-datato bring in fix for critical vulnerability by @matthewhughes934 in #618New Contributors
Full Changelog: actions/setup-go@v5...v6.0.0
v6Compare Source
v5.6.0Compare Source
What's Changed
Full Changelog: actions/setup-go@v5...v5.6.0
v5.5.0Compare Source
What's Changed
Bug fixes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-go@v5...v5.5.0
v5.4.0Compare Source
What's Changed
Dependency updates :
New Contributors
Full Changelog: actions/setup-go@v5...v5.4.0
v5.3.0Compare Source
What's Changed
@actions/cacheto^4.0.0by @Link- in #531New Contributors
Full Changelog: actions/setup-go@v5...v5.3.0
github/codeql-action (github/codeql-action)
v4.37.7Compare Source
v4.37.6Compare Source
.github/codeql-config.ymlto align it with the suggested path that is used elsewhere. #4070v4.37.5Compare Source
initAction instead of falling back to downloading the bundle before extracting it. #4061v4.37.4Compare Source
v4.37.3Compare Source
No user facing changes.
v4.37.2Compare Source
config-fileinput that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, theremote=prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023v4.37.1Compare Source
v4.37.0Compare Source
config-fileinput for thecodeql-action/initstep will soon support a new[owner/]repo[@ref][:path]format. All components except the repository name are optional. If omitted,ownerdefaults to the same owner as the repository the analysis is running for,reftomain, andpathto.github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973v4.36.3Compare Source
No user facing changes.
v4.36.2Compare Source
v4.36.1Compare Source
No user facing changes.
v4.36.0Compare Source
v4.35.5Compare Source
analysis-kindsinput, onlycode-scanningwill be enabled. Theanalysis-kindsinput is experimental, for GitHub-internal use only, and may change without notice at any time. #3892v4.35.4Compare Source
v4.35.3Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.