Skip to content

Update all dependencies #415

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update all dependencies #415

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cgr.dev/chainguard/glibc-dynamic final digest ef35f03 -> 1085eb5
cgr.dev/chainguard/go stage digest 2bf52f0 -> 92da81e
github.com/gofiber/fiber/v2 require patch v2.52.6 -> v2.52.8 age adoption passing confidence
github/codeql-action action patch v3.28.15 -> v3.28.18 age adoption passing confidence
oxsecurity/megalinter action digest 1463330 -> 5a91fb0
stefanzweifel/git-auto-commit-action action digest e348103 -> b863ae1
step-security/harden-runner action minor v2.11.1 -> v2.12.0 age adoption passing confidence

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v2.52.8

Compare Source

👮 Security

🧹 Updates

🐛 Bug Fixes

📚 Documentation

Full Changelog: gofiber/fiber@v2.52.6...v2.52.8

v2.52.7

Compare Source

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

step-security/harden-runner (step-security/harden-runner)

v2.12.0

Compare Source

What's Changed
  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0


Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update cgr.dev/chainguard/go Docker digest to dc53da3 Update all dependencies Apr 17, 2025
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 9ed2c38 to da5af06 Compare April 23, 2025 23:08
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 22dcc65 to 88e984d Compare May 1, 2025 21:52
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from b4dba26 to b9e60a2 Compare May 9, 2025 02:05
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 9776d2a to 22a9a17 Compare May 16, 2025 10:30
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from b0b2289 to fadb803 Compare May 23, 2025 03:52
@renovate renovate bot force-pushed the renovate/all branch from fadb803 to 78a94e5 Compare May 27, 2025 01:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants