Skip to content

Update all dependencies #413

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update all dependencies #413

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 16, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cgr.dev/chainguard/glibc-dynamic final digest ef35f03 -> 2554394
cgr.dev/chainguard/go stage digest 2bf52f0 -> 86afb53
github.com/gofiber/fiber/v2 require patch v2.52.6 -> v2.52.8 age adoption passing confidence
github/codeql-action action patch v3.28.15 -> v3.28.18 age adoption passing confidence
ossf/scorecard-action action patch v2.4.1 -> v2.4.2 age adoption passing confidence
oxsecurity/megalinter action digest 1463330 -> 5a91fb0
stefanzweifel/git-auto-commit-action action digest e348103 -> b863ae1
step-security/harden-runner action minor v2.11.1 -> v2.12.0 age adoption passing confidence

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v2.52.8

Compare Source

👮 Security

🧹 Updates

🐛 Bug Fixes

📚 Documentation

Full Changelog: gofiber/fiber@v2.52.6...v2.52.8

v2.52.7

Compare Source

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.12.0

Compare Source

What's Changed

  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0


Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update cgr.dev/chainguard/go Docker digest to dc53da3 Update all dependencies Apr 17, 2025
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from 0434097 to ebe1ea6 Compare April 23, 2025 22:03
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from a3f14b4 to fa55943 Compare May 1, 2025 22:41
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 07bb249 to d6413af Compare May 9, 2025 03:09
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from cb529da to 4c27051 Compare May 16, 2025 11:09
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 25e2ea7 to 1f1ced1 Compare May 23, 2025 03:34
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 60256fd to ca19207 Compare May 30, 2025 03:20
@renovate renovate bot force-pushed the renovate/all branch from ca19207 to 652b896 Compare May 30, 2025 21:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants