Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update workflows (#529)
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | patch | `v3.1.2` -> `v3.1.3` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | digest | `4c0219f` -> `885d146` | | gaurav-nelson/github-action-markdown-link-check | action | digest | `46e4421` -> `a996638` | | [github/codeql-action](https://github.com/github/codeql-action) | action | patch | `v2.21.4` -> `v2.21.5` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | minor | `v4.3.0` -> `v4.6.0` | | [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) | action | minor | `v1.8.0` -> `v1.9.0` | --- ### Release Notes <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v3.1.3`](https://github.com/actions/upload-artifact/releases/tag/v3.1.3) [Compare Source](https://github.com/actions/upload-artifact/compare/v3.1.2...v3.1.3) #### What's Changed - chore(github): remove trailing whitespaces by [@​ljmf00](https://github.com/ljmf00) in [actions/upload-artifact#313 - Bump [@​actions/artifact](https://github.com/actions/artifact) version to v1.1.2 by [@​bethanyj28](https://github.com/bethanyj28) in [actions/upload-artifact#436 **Full Changelog**: actions/upload-artifact@v3...v3.1.3 </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v2.21.5`](https://github.com/github/codeql-action/compare/v2.21.4...v2.21.5) [Compare Source](https://github.com/github/codeql-action/compare/v2.21.4...v2.21.5) </details> <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v4.6.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v4.6.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v4.5.0...v4.6.0) Reverts the change to `node20` runtime. **Full Changelog**: goreleaser/goreleaser-action@v4.5.0...v4.6.0 ### [`v4.5.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v4.5.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v4.4.0...v4.5.0) #### What's Changed - chore(deps): bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#427 - feat: bump to use node20 runtime, actions/checkout to v4 by [@​kbdharun](https://github.com/kbdharun) in [goreleaser/goreleaser-action#430 #### New Contributors - [@​kbdharun](https://github.com/kbdharun) made their first contribution in [goreleaser/goreleaser-action#430 **Full Changelog**: goreleaser/goreleaser-action@v4.4.0...v4.5.0 ### [`v4.4.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v4.4.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v4.3.0...v4.4.0) ##### What's Changed - chore(deps): bump semver from 7.5.0 to 7.5.1 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#417 - feat: support oss nightlies by [@​caarlos0](https://github.com/caarlos0) in [goreleaser/goreleaser-action#424 **Full Changelog**: goreleaser/goreleaser-action@v4.3.0...v4.4.0 </details> <details> <summary>slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)</summary> ### [`v1.9.0`](https://github.com/slsa-framework/slsa-github-generator/blob/HEAD/CHANGELOG.md#v190) [Compare Source](https://github.com/slsa-framework/slsa-github-generator/compare/v1.8.0...v1.9.0) Release \[v1.9.0] includes bug fixes and new features. See the [full change list](https://github.com/slsa-framework/slsa-github-generator/compare/v1.8.0...v1.9.0). ##### v1.9.0: BYOB framework (beta) - **New**: A [new framework](https://github.com/slsa-framework/slsa-github-generator/blob/main/BYOB.md) to turn GitHub Actions into SLSA compliant builders. ##### v1.9.0: Maven builder (beta) - **New**: A [Maven builder](https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/maven) to build Java projects and publish to Maven central. ##### v1.9.0: Gradle builder (beta) - **New**: A [Gradle builder](https://github.com/slsa-framework/slsa-github-generator/tree/main/internal/builders/gradle) to build Java projects and publish to Maven central. ##### v1.9.0: JReleaser builder - **New**: A [JReleaser builder](https://github.com/jreleaser/release-action/tree/v1.0.0-java) that wraps the official [JReleaser Action](https://github.com/jreleaser/release-action/tree/v1.0.0-java). </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/google/osv-scanner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44My4wIiwidXBkYXRlZEluVmVyIjoiMzYuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
- Loading branch information