chore(deps): update all-ci-dependencies #267

renovate · 2025-10-15T09:41:23Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v6.0.0` → `v6.0.1`
actions/setup-go	action	minor	`v6.0.0` → `v6.2.0`
codecov/codecov-action	action	patch	`v5.5.1` → `v5.5.2`
docker/setup-buildx-action	action	minor	`v3.11.1` → `v3.12.0`
docker/setup-qemu-action	action	minor	`v3.6.0` → `v3.7.0`
openbao		minor	`0.19.0` → `0.23.3`
securego/gosec	action	patch	`v2.22.9` → `v2.22.11`
zgosalvez/github-actions-ensure-sha-pinned-actions	action	patch	`v4.0.0` → `v4.0.1`

Release Notes

actions/checkout (actions/checkout)

`v6.0.1`

Compare Source

actions/setup-go (actions/setup-go)

`v6.2.0`

Compare Source

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: actions/setup-go@v6...v6.1.0

codecov/codecov-action (codecov/codecov-action)

`v5.5.2`

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.12.0`

Compare Source

Deprecate install input by @crazy-max in #455
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #434
Bump brace-expansion from 1.1.11 to 1.1.12 in #436
Bump form-data from 2.5.1 to 2.5.5 in #432
Bump undici from 5.28.4 to 5.29.0 in #435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v3.7.0`

Compare Source

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in #217 #230
Bump brace-expansion from 1.1.11 to 1.1.12 in #220
Bump form-data from 2.5.1 to 2.5.5 in #218
Bump tmp from 0.2.3 to 0.2.4 in #221
Bump undici from 5.28.4 to 5.29.0 in #219

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

openbao/openbao-helm (openbao)

`v0.23.3`

Compare Source

fix(deps): switch injector to openbao-k8s with patched golang.org/x/crypto (CVE-2024-45337)

`v0.23.2`

Compare Source

fix(snapshotAgent): correct envFrom structure in CronJob template

`v0.23.1`

Compare Source

fix(tlsroute): fix example hosts format

`v0.23.0`

Compare Source

feat: added extraLabels on relevant services, fixing #123

`v0.22.2`

Compare Source

fix: add snapshotAgent security context to snapshot agent

`v0.22.1`

Compare Source

fix: add snapshotAgent resources to the templating, fixing #121

`v0.22.0`

Compare Source

feat: added openbao-snapshot-agent as cronjob to chart

`v0.21.2`

Compare Source

fix: Fix removed whitespace for extraObjects by @javex in #114

`v0.21.1`

Compare Source

fix: do not produce empty annotations and consolidate general annotation handling in helpers file

`v0.21.0`

Compare Source

feat: add support for gateway-api tlsroutes

`v0.20.0`

Compare Source

Changes

Set default value for podManagementPolicy to 'OrderedReady'

`v0.19.3`

Compare Source

Changes

Update default image to 2.4.4

`v0.19.2`

Compare Source

Changes

fix(grafana): dashboard datasource by @CorentinPtrl

`v0.19.1`

Compare Source

Changes

Security update to 2.4.3

Docs:

Reintroduce CHANGELOG.md

securego/gosec (securego/gosec)

`v2.22.11`

Compare Source

Changelog

424fc4c feature: add rule for trojan source (#1431)
aa2e2fb feat(ai): add OpenAI and custom API provider support (#1424)
b6eea26 chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1437)
41f28e2 chore(deps): update module google.golang.org/genai to v1.37.0 (#1435)
daccba6 refactor: simplify report functions in main.go (#1434)
d4be287 Update go to 1.25.5 and 1.24.11 in CI (#1433)
fde7515 chore(deps): update all dependencies (#1425)
20c9506 feat(ai): add support for latest Claude models and update provider flags (#1423)
bd9e372 Bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#1427)
7aa7e93 chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#1428)
a58917f fix: correct schema with temporary placeholder (#1418)
8b0d0b8 perf: skip SSA analysis if no analyzers are loaded (#1419)
8a5d01a test: add sarif validation (#1417)
a8fefd1 chore(deps): update all dependencies (#1421)
c34cbbf Update go to version 1.25.4 and 1.24.10 in CI (#1415)
10cf58a fix: build tag parsing. (#1413)
d2d7348 chore(deps): update all dependencies (#1411)
afa853e chore(deps): update all dependencies (#1409)
6b2e6e4 chore(deps): update all dependencies (#1408)
0adab9d Update gosec to version v2.22.10 in the github action (#1405)

`v2.22.10`

Compare Source

Changelog

6be2b51 Update go to version 1.25.3 and 1.24.9 in CI (#1404)
fddb942 chore(deps): update all dependencies (#1402)
f676031 Update go to version 1.25.2 and 2.24.8 in CI (#1401)
35f7ec2 chore(deps): update all dependencies (#1399)
01029f0 check nil slices, partially check bounds (#1396)
34db3de Remove unused target from the makefile
f5a3b7a Use the ginkgo command install by the dependencies
761fcbc Keep the go module at 1.24 version for compatibility reasons
2238079 Remove manual test deps
bb08aa3 fix: text must be supplied when markdown is used
23597d2 fix: improve error message of CheckAnalyzers
8d7e9d5 fix: log panic on SSA
0d8255e chore(deps): update all dependencies
f9c52aa Update gosec to version v.22.9 in the github action

zgosalvez/github-actions-ensure-sha-pinned-actions (zgosalvez/github-actions-ensure-sha-pinned-actions)

`v4.0.1`

Compare Source

What's Changed

Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #270
Bump glob from 10.4.5 to 10.5.0 by @dependabot[bot] in #269
Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #268
Bump eslint from 9.36.0 to 9.39.1 by @dependabot[bot] in #267
Bump actions/setup-node from 4.4.0 to 6.0.0 by @dependabot[bot] in #266
Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #265
Bump jest from 30.1.3 to 30.2.0 by @dependabot[bot] in #260
Bump yaml from 2.8.1 to 2.8.2 by @dependabot[bot] in #271

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v4.0.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2025-10-15T09:45:02Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate bot force-pushed the renovate/all-ci-dependencies branch from f67e90c to 64fda22 Compare October 16, 2025 22:07

renovate bot changed the title ~~chore(deps): update securego/gosec action to v2.22.10~~ chore(deps): update all-ci-dependencies Oct 16, 2025

renovate bot force-pushed the renovate/all-ci-dependencies branch from 64fda22 to 0db75d2 Compare October 23, 2025 09:55

renovate bot force-pushed the renovate/all-ci-dependencies branch 4 times, most recently from 27338bf to 8a158d9 Compare November 10, 2025 20:42

renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from 4d59ba1 to 25cc9bc Compare November 20, 2025 05:34

renovate bot force-pushed the renovate/all-ci-dependencies branch from 25cc9bc to 6bcb514 Compare November 25, 2025 07:13

oliverbaehler approved these changes Nov 25, 2025

View reviewed changes

renovate bot force-pushed the renovate/all-ci-dependencies branch from 6bcb514 to bbd0f27 Compare November 25, 2025 14:51

renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from 3e30a1e to c4d803a Compare December 4, 2025 12:48

renovate bot force-pushed the renovate/all-ci-dependencies branch 4 times, most recently from dde975d to bd824fa Compare December 16, 2025 09:30

renovate bot force-pushed the renovate/all-ci-dependencies branch 3 times, most recently from 75e48b4 to bfb39d5 Compare December 19, 2025 15:43

renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from 3da2516 to 3f07497 Compare December 30, 2025 13:58

renovate bot force-pushed the renovate/all-ci-dependencies branch 4 times, most recently from be2f08c to 40b0c9b Compare January 6, 2026 01:06

chore(deps): update all-ci-dependencies

5a832a9

renovate bot force-pushed the renovate/all-ci-dependencies branch from 40b0c9b to 5a832a9 Compare January 13, 2026 05:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all-ci-dependencies #267

chore(deps): update all-ci-dependencies #267

Uh oh!

renovate bot commented Oct 15, 2025 •

edited

Loading

Uh oh!

codecov bot commented Oct 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): update all-ci-dependencies #267

Are you sure you want to change the base?

chore(deps): update all-ci-dependencies #267

Uh oh!

Conversation

renovate bot commented Oct 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancements

Dependency updates

New Contributors

What's Changed

Changes

Changes

Changes

Changes

Docs:

Changelog

Changelog

What's Changed

Configuration

Uh oh!

codecov bot commented Oct 15, 2025

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Oct 15, 2025 •

edited

Loading