Skip to content

Update all dependencies #422

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update all dependencies #422

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cgr.dev/chainguard/glibc-dynamic final digest ef35f03 -> 1085eb5
cgr.dev/chainguard/go stage digest 2bf52f0 -> 0d82b93
github.com/gofiber/fiber/v2 require patch v2.52.6 -> v2.52.8 age adoption passing confidence
github/codeql-action action patch v3.28.15 -> v3.28.18 age adoption passing confidence
oxsecurity/megalinter action digest 1463330 -> 5a91fb0
stefanzweifel/git-auto-commit-action action digest e348103 -> b863ae1
step-security/harden-runner action minor v2.11.1 -> v2.12.0 age adoption passing confidence

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v2.52.8

Compare Source

👮 Security

🧹 Updates

🐛 Bug Fixes

📚 Documentation

Full Changelog: gofiber/fiber@v2.52.6...v2.52.8

v2.52.7

Compare Source

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025
  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

step-security/harden-runner (step-security/harden-runner)

v2.12.0

Compare Source

What's Changed
  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0


Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update cgr.dev/chainguard/go Docker digest to dc53da3 Update all dependencies Apr 17, 2025
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 5a0312e to f1a61ac Compare April 23, 2025 20:30
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 7c3c7df to 11538be Compare April 27, 2025 22:28
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 9419f0c to 4db4b40 Compare May 7, 2025 23:27
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 2853e02 to bc7a4cc Compare May 14, 2025 19:14
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 2c988f7 to e07b674 Compare May 22, 2025 13:51
@renovate renovate bot force-pushed the renovate/all branch from e07b674 to 31e87ac Compare May 23, 2025 03:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants