Skip to content

chore(deps): Update dependencies for github#455

Merged
rhatgadkar-goog merged 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/dependencies-for-github
Jun 9, 2025
Merged

chore(deps): Update dependencies for github#455
rhatgadkar-goog merged 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/dependencies-for-github

Conversation

@renovate-bot

@renovate-bot renovate-bot commented May 16, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github/codeql-action action patch v3.28.17 -> v3.28.19
ossf/scorecard-action action patch v2.4.1 -> v2.4.2

Release Notes

github/codeql-action (github/codeql-action)

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025
  • The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
    The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
    your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
    actions analysis.
  • Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025
  • Update default CodeQL bundle version to 2.21.3. #​2893
  • Skip validating SARIF produced by CodeQL for improved performance. #​2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner May 16, 2025 13:31
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch 9 times, most recently from f68ca8e to d7a87b4 Compare May 30, 2025 17:12
@renovate-bot renovate-bot changed the title chore(deps): Update github/codeql-action action to v3.28.18 chore(deps): Update dependencies for github May 30, 2025
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch 18 times, most recently from e3fe4fa to 03c2b35 Compare June 3, 2025 08:29
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch 25 times, most recently from 9454ea0 to 537fbd4 Compare June 9, 2025 21:30
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 537fbd4 to 92bbfe5 Compare June 9, 2025 21:38
@rhatgadkar-goog rhatgadkar-goog merged commit 319d28f into GoogleCloudPlatform:main Jun 9, 2025
14 checks passed
@renovate-bot renovate-bot deleted the renovate/dependencies-for-github branch June 9, 2025 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants