Skip to content

Commit cb97534

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group across 1 directory with 9 updates
Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2` | `3` | | [azure/setup-helm](https://github.com/azure/setup-helm) | `4` | `5` | | [robinraju/release-downloader](https://github.com/robinraju/release-downloader) | `1.12` | `1.13` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3` | `4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.32.5` | `4.35.2` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `97e0b3872f55f89b95b2f65b3dbab56962816478` | `ed142fd0673e97e23eac54620cfb913e5ce36c25` | Updates `softprops/action-gh-release` from 2 to 3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2...v3) Updates `azure/setup-helm` from 4 to 5 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](Azure/setup-helm@v4...v5) Updates `robinraju/release-downloader` from 1.12 to 1.13 - [Release notes](https://github.com/robinraju/release-downloader/releases) - [Commits](robinraju/release-downloader@v1.12...v1.13) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v3...v4) Updates `docker/setup-qemu-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@v3...v4) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) Updates `github/codeql-action` from 4.32.5 to 4.35.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c793b71...95e58e9) Updates `aquasecurity/trivy-action` from 97e0b3872f55f89b95b2f65b3dbab56962816478 to ed142fd0673e97e23eac54620cfb913e5ce36c25 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@97e0b38...ed142fd) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: azure/setup-helm dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: robinraju/release-downloader dependency-version: '1.13' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: ed142fd0673e97e23eac54620cfb913e5ce36c25 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent f5cc24d commit cb97534

5 files changed

Lines changed: 15 additions & 15 deletions

File tree

‎.github/workflows/build.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
cd bin
4545
sha256sum * > code-marketplace_${{ github.ref_name }}_checksums.txt
4646
47-
- uses: softprops/action-gh-release@v2
47+
- uses: softprops/action-gh-release@v3
4848
with:
4949
draft: true
5050
files: ./bin/*

‎.github/workflows/helm.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
runs-on: ubuntu-latest
2626
steps:
2727
- uses: actions/checkout@v6.0.2
28-
- uses: azure/setup-helm@v4
28+
- uses: azure/setup-helm@v5
2929
with:
3030
token: ${{ secrets.GITHUB_TOKEN }}
3131
- run: helm lint --strict ./helm

‎.github/workflows/publish.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,21 +19,21 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- uses: actions/checkout@v6.0.2
22-
- uses: robinraju/release-downloader@v1.12
22+
- uses: robinraju/release-downloader@v1.13
2323
with:
2424
repository: "coder/code-marketplace"
2525
tag: ${{ github.event.inputs.version || github.ref_name }}
2626
fileName: "code-marketplace-linux-*"
2727
out-file-path: "bin"
2828

29-
- uses: docker/login-action@v3
29+
- uses: docker/login-action@v4
3030
with:
3131
registry: ghcr.io
3232
username: ${{ github.actor }}
3333
password: ${{ secrets.GITHUB_TOKEN }}
3434

35-
- uses: docker/setup-qemu-action@v3
36-
- uses: docker/setup-buildx-action@v3
35+
- uses: docker/setup-qemu-action@v4
36+
- uses: docker/setup-buildx-action@v4
3737
- run: docker buildx bake -f ./docker-bake.hcl --push
3838
env:
3939
VERSION: ${{ github.event.inputs.version || github.ref_name }}

‎.github/workflows/scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,13 +34,13 @@ jobs:
3434
publish_results: true
3535

3636
- name: Upload artifact
37-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
37+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
3838
with:
3939
name: SARIF file
4040
path: results.sarif
4141
retention-days: 5
4242

4343
- name: Upload to code-scanning
44-
uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
44+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
4545
with:
4646
sarif_file: results.sarif

‎.github/workflows/security.yaml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939
go-version-file: "go.mod"
4040

4141
- name: Initialize CodeQL
42-
uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
42+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
4343
with:
4444
languages: go
4545

4646
- name: Perform CodeQL Analysis
47-
uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
47+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
4848
with:
4949
category: "/language:go"
5050

@@ -69,7 +69,7 @@ jobs:
6969
run: make bin/code-marketplace-linux-amd64
7070

7171
- name: Set up Docker Buildx
72-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
72+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
7373

7474
- name: Build Docker image
7575
id: build
@@ -82,28 +82,28 @@ jobs:
8282
echo "image=code-marketplace:scan" >> "$GITHUB_OUTPUT"
8383
8484
- name: Run Trivy vulnerability scanner (table output for logs)
85-
uses: aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # v0.34.2
85+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.34.2
8686
with:
8787
image-ref: ${{ steps.build.outputs.image }}
8888
format: "table"
8989
severity: "LOW,MEDIUM,HIGH,CRITICAL"
9090

9191
- name: Run Trivy vulnerability scanner (SARIF output for GitHub)
92-
uses: aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # v0.34.2
92+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.34.2
9393
with:
9494
image-ref: ${{ steps.build.outputs.image }}
9595
format: "sarif"
9696
output: "trivy-results.sarif"
9797
severity: "LOW,MEDIUM,HIGH,CRITICAL"
9898

9999
- name: Upload Trivy scan results to GitHub Security tab
100-
uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
100+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
101101
with:
102102
sarif_file: "trivy-results.sarif"
103103
category: "Trivy"
104104

105105
- name: Upload Trivy scan results as artifact
106-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
106+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
107107
with:
108108
name: trivy-results
109109
path: trivy-results.sarif

0 commit comments

Comments
 (0)