🌱 Bump the all-github-actions group with 4 updates #173
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the all-github-actions group with 4 updates: [actions/setup-go](https://github.com/actions/setup-go), [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action), [google/osv-scanner](https://github.com/google/osv-scanner) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/setup-go` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@f111f33...0aaccfd) Updates `golangci/golangci-lint-action` from 6.3.2 to 6.5.2 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@051d919...55c2c14) Updates `google/osv-scanner` from 1.9.2 to 2.0.0 - [Release notes](https://github.com/google/osv-scanner/releases) - [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md) - [Commits](google/osv-scanner@1e295ee...0e986b4) Updates `github/codeql-action` from 3.28.11 to 3.28.12 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@6bb031a...5f8171a) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-github-actions - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-github-actions - dependency-name: google/osv-scanner dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
ok-to-test
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a metal3-io member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
metal3-io-bot
added
the
size/S
|
Needs golangci-lint bump. @kashifest is working on it. |
|
/hold |
metal3-io-bot
added
the
do-not-merge/hold
Bumps the all-github-actions group with 4 updates: actions/setup-go, golangci/golangci-lint-action, google/osv-scanner and github/codeql-action.
Updates
actions/setup-gofrom 5.3.0 to 5.4.0Release notes
Sourced from actions/setup-go's releases.
Commits
0aaccfdBump undici from 5.28.4 to 5.28.5 (#541)c4c1141upgrade actions/cache to 4.0.2 (#568)5a083d0Bump eslint-config-prettier from 8.10.0 to 10.0.1 (#536)1d82324Bump semver from 7.6.0 to 7.6.3 (#535)Updates
golangci/golangci-lint-actionfrom 6.3.2 to 6.5.2Release notes
Sourced from golangci/golangci-lint-action's releases.
... (truncated)
Commits
55c2c146.5.2911ec56fix: update max version (#1201)eb5c0ccbuild(deps-dev): bump the dev-dependencies group with 2 updates (#1199)4696ba86.5.12ee514ffeat: restrict action v6 on golangci-lint v1 (#1194)7e7b516fix: octokit retry (#1193)b871b4fbuild(deps): bump@types/nodefrom 22.13.8 to 22.13.10 in the dependencies gr...08ba820build(deps-dev): bump eslint-config-prettier from 10.0.2 to 10.1.1 in the dev...d8648acbuild(deps-dev): bump the dev-dependencies group across 1 directory with 5 up...37d62aebuild(deps): bump the dependencies group with 2 updates (#1189)Updates
google/osv-scannerfrom 1.9.2 to 2.0.0Release notes
Sourced from google/osv-scanner's releases.
... (truncated)
Changelog
Sourced from google/osv-scanner's changelog.
... (truncated)
Commits
0e986b4chore: Update documentation lockfile (#1715)19e3061chore: V2 release changelog (#1711)5462bdafix(javareach): maven validation and correct manifest class name parsing (#1708)2c0af94refactor: useanyinstead ofinterface{}(#1709)44ceaf0fix(deps): update osv-scanner minor (#1699)8efd81echore(deps): update github/codeql-action action to v3.28.11 (#1697)6483c71chore: configuregolangci-lintto always show all issues from all linters (...324f066chore: exclude all third-party packages from linting (#1704)b202534fix: Update to the commit before container optimisation (#1702)2310a89chore(deps): update golang docker tag to v1.24.1 (#1698)Updates
github/codeql-actionfrom 3.28.11 to 3.28.12Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
5f8171aMerge pull request #2814 from github/update-v3.28.12-6349095d1bb59f77Update changelog for v3.28.126349095Merge pull request #2810 from github/update-bundle/codeql-bundle-v2.20.7d7d03fdAdd changelog note4e3a534Update default bundle to codeql-bundle-v2.20.755f0237Merge pull request #2802 from github/mbg/dependency-caching/java-buildless6a151cdMerge pull request #2811 from github/dependabot/github_actions/actions-c2c311...7866bcdManually bump workflow to match autogenerated file611289ebuild(deps): bump ruby/setup-ruby in the actions group4c409a5Remove temporary dependency directory inanalyzepost actionDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions