Skip to content

Update all dependencies #413

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update all dependencies #413

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cgr.dev/chainguard/glibc-dynamic final digest ef35f03 -> 1085eb5
cgr.dev/chainguard/go stage digest 2bf52f0 -> 0d82b93
github.com/gofiber/fiber/v2 require patch v2.52.6 -> v2.52.8 age adoption passing confidence
github/codeql-action action patch v3.28.15 -> v3.28.18 age adoption passing confidence
oxsecurity/megalinter action digest 1463330 -> 5a91fb0
stefanzweifel/git-auto-commit-action action digest e348103 -> b863ae1
step-security/harden-runner action minor v2.11.1 -> v2.12.0 age adoption passing confidence

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v2.52.8

Compare Source

👮 Security

🧹 Updates

🐛 Bug Fixes

📚 Documentation

Full Changelog: gofiber/fiber@v2.52.6...v2.52.8

v2.52.7

Compare Source

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025
  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

step-security/harden-runner (step-security/harden-runner)

v2.12.0

Compare Source

What's Changed
  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0


Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update cgr.dev/chainguard/go Docker digest to dc53da3 Update all dependencies Apr 17, 2025
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 6f6a3f4 to 8256c3c Compare April 23, 2025 22:21
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from f9be619 to e784b32 Compare April 27, 2025 23:09
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 8e61b12 to b36c634 Compare May 7, 2025 22:46
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 314763a to 6abf016 Compare May 14, 2025 23:47
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 2ed7445 to 037613a Compare May 22, 2025 08:38
@renovate renovate bot force-pushed the renovate/all branch from 037613a to 675ad5a Compare May 23, 2025 08:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants