Bump the minor group with 3 updates

[dependabot]

Bumps the minor group with 3 updates: docker/setup-buildx-action, actions/setup-dotnet and dorny/test-reporter.

Updates docker/setup-buildx-action from 3.11.1 to 3.12.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.12.0

• Deprecate install input by @​crazy-max in docker/setup-buildx-action#455
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/setup-buildx-action#434
• Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-buildx-action#436
• Bump form-data from 2.5.1 to 2.5.5 in docker/setup-buildx-action#432
• Bump undici from 5.28.4 to 5.29.0 in docker/setup-buildx-action#435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

Commits

• 8d2750c Merge pull request #455 from crazy-max/install-deprecated
• e81846b deprecate install input
• 65d18f8 Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6
• 000d75d build(deps): bump actions/checkout from 5 to 6
• 1583c0f Merge pull request #443 from nicolasleger/patch-1
• ed158e7 doc: bump actions/checkout from 4 to 5
• 4cc794f Merge pull request #441 from docker/dependabot/github_actions/actions/checkout-5
• 4dfc3d6 build(deps): bump actions/checkout from 4 to 5
• af1b253 Merge pull request #440 from crazy-max/k3s-build
• 3c6ab92 ci: k3s test with latest buildx
• Additional commits viewable in compare view

Updates actions/setup-dotnet from 5.0.1 to 5.1.0

Release notes

Sourced from actions/setup-dotnet's releases.

v5.1.0

What's Changed

Documentation

• Readme update for environment variable on self hosted linux runners by @​priya-kinthali in actions/setup-dotnet#689
• Contributor icon updates by @​Falco20019 in actions/setup-dotnet#604

Dependency updates

• Upgrade actions/checkout from 5 to 6 by @​dependabot in actions/setup-dotnet#684
• Upgrade to latest actions packages by @​salmanmkc in actions/setup-dotnet#687
• Upgrade dependencies in testproject and checkout in Readme by @​priya-kinthali in actions/setup-dotnet#692

New Contributors

• @​priya-kinthali made their first contribution in actions/setup-dotnet#689
• @​Falco20019 made their first contribution in actions/setup-dotnet#604

Full Changelog: actions/setup-dotnet@v5...v5.1.0

Commits

• baa11fb Bump test dependencies to resolve System.Net.Http vulnerability, update workf...
• 24ec4f2 Upgrade to latest actions packages (#687)
• 4c100cb Fix icons (#604)
• 25328d8 Bump actions/checkout from 5 to 6 (#684)
• 937b8dd Update README with note on setting DOTNET_INSTALL_DIR for Linux permission is...
• See full diff in compare view

Updates dorny/test-reporter from 2.3.0 to 2.5.0

Release notes

Sourced from dorny/test-reporter's releases.

v2.5.0

What's Changed

Features

• Add Nette Tester JUnit Reporter by @​jozefizso in dorny/test-reporter#707

Project maintanance

• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in dorny/test-reporter#695

Full Changelog: dorny/test-reporter@v2.4.0...v2.5.0

v2.4.0

What's Changed

• Create tests for sample JUnit files by @​jozefizso in dorny/test-reporter#701
• Support for the PHPUnit dialect of JUnit by @​mbeccati in dorny/test-reporter#422
• Use String.substring() function by @​jozefizso in dorny/test-reporter#704

New Contributors

• @​mbeccati made their first contribution in dorny/test-reporter#422

Full Changelog: dorny/test-reporter@v2.3.0...v2.4.0

Changelog

Sourced from dorny/test-reporter's changelog.

Changelog

2.5.0

• Feature: Add Nette Tester support with tester-junit reporter dorny/test-reporter#707
• Maintenance: Bump actions/upload-artifact from 5 to 6 dorny/test-reporter#695

2.4.0

• Feature: Add PHPUnit support with JUnit XML dialect parser dorny/test-reporter#422
• Feature: Add JUnit XML sample files and tests for validation dorny/test-reporter#701
• Fix: Refactor deprecated String.substr() function to use String.substring() dorny/test-reporter#704

2.3.0

• Feature: Add Python support with python-xunit reporter (pytest) dorny/test-reporter#643
• Feature: Add pytest traceback parsing and directory-mapping option dorny/test-reporter#238
• Performance: Update sax.js to fix large XML file parsing dorny/test-reporter#681
• Documentation: Complete documentation for all supported reporters dorny/test-reporter#691
• Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) dorny/test-reporter#682

2.2.0

• Feature: Add collapsed option to control report summary visibility dorny/test-reporter#664
• Fix badge encoding for values including underscore and hyphens dorny/test-reporter#672
• Fix missing report-title attribute in action definition dorny/test-reporter#637
• Refactor variable names to fix shadowing issues dorny/test-reporter#630

2.1.1

• Fix error when a TestMethod element does not have a className attribute in a trx file dorny/test-reporter#623
• Add stack trace from trx to summary dorny/test-reporter#615
• List only failed tests dorny/test-reporter#606
• Add type definitions to github-utils.ts dorny/test-reporter#604
• Avoid split on undefined dorny/test-reporter#258
• Return links to summary report dorny/test-reporter#588
• Add step summary short summary dorny/test-reporter#589
• Fix for empty TRX TestDefinitions dorny/test-reporter#582
• Increase step summary limit to 1MiB dorny/test-reporter#581
• Fix input description for list options dorny/test-reporter#572

2.1.0

• Feature: Add summary title dorny/test-reporter#568
• Feature: Add Golang test parser dorny/test-reporter#571
• Increase step summary limit to 1MiB dorny/test-reporter#581
• Fix for empty TRX TestDefinitions dorny/test-reporter#582
• Fix input description for list options dorny/test-reporter#572
• Update npm packages dorny/test-reporter#583

2.0.0

• Parse JUnit report with detailed message in failure dorny/test-reporter#559
• Support displaying test results in markdown using GitHub Actions Job Summaries dorny/test-reporter#383

1.9.1

• Fix problematic retransmission of authentication token dorny/test-reporter#438

... (truncated)

Commits

• b082adf test-reporter release v2.5.0
• bcafc9f Merge pull request #707 from dorny/feature/700-nette-tester-junit-reporter
• b0cbac6 Rebuild the dist/index.js file
• c92a289 Remove unnecessary output files
• 6697ec4 Merge pull request #695 from dorny/dependabot/github_actions/actions/upload-a...
• 6387029 Create tester-junit reporter for Nette Tester tool
• 6896772 Merge pull request #706 from dorny/release/v2.4.0
• e17be7e test-reporter release v2.4.0
• 6efb86e Merge pull request #704 from dorny/bugfix/703-refactor-deprecated-substr-func...
• 055bc8c Rebuild the dist/index.js file
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 1 packages with OpenSSF Scorecard issues.

See the Details below.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/setup-dotnet	baa11fbfe1d6520db94683bd5c7a3818018e4309	🟢 5.8	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 5 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Vulnerabilities 🟢 9 1 existing vulnerabilities detected SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8
actions/dorny/test-reporter	b082adf0eced0765477756c2a610396589b8c637	⚠️ 4	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 1 Found 1/9 approved changesets -- score normalized to 1 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy ⚠️ 0 security policy file not detected Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2 Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 24 existing vulnerabilities detected

Scanned Files

• .github/workflows/dotnet.yml

[dependabot]

The group that created this PR has been removed from your configuration.