Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #147

Merged
merged 2 commits into from
Jul 10, 2024
Merged

chore(deps): update github-actions #147

merged 2 commits into from
Jul 10, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.1.6 -> v4.1.7
actions/download-artifact action patch v4.1.7 -> v4.1.8
actions/setup-dotnet action patch v4.0.0 -> v4.0.1
actions/upload-artifact action patch v4.3.3 -> v4.3.4
amannn/action-semantic-pull-request action patch v5.5.2 -> v5.5.3
bufbuild/buf-setup-action action minor v1.32.2 -> v1.34.0
docker/build-push-action action digest 2cdde99 -> ca052bb
docker/setup-buildx-action action digest d70bba7 -> 4fd8129
docker/setup-qemu-action action digest 6882732 -> 5927c83
github/codeql-action action patch v3.25.8 -> v3.25.11
miracum/.github action minor v1.9.1 -> v1.11.2

Release Notes

actions/checkout (actions/checkout)

v4.1.7

Compare Source

actions/download-artifact (actions/download-artifact)

v4.1.8

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4...v4.1.8

actions/setup-dotnet (actions/setup-dotnet)

v4.0.1

Compare Source

What's Changed

Documentation changes:
Dependency updates:

New Contributors

Full Changelog: actions/setup-dotnet@v4...v4.0.1

actions/upload-artifact (actions/upload-artifact)

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)

v5.5.3

Compare Source

Bug Fixes
bufbuild/buf-setup-action (bufbuild/buf-setup-action)

v1.34.0

Compare Source

Release v1.34.0

v1.33.0

Compare Source

Release v1.33.0

github/codeql-action (github/codeql-action)

v3.25.11

Compare Source

v3.25.10

Compare Source

v3.25.9

Compare Source

miracum/.github (miracum/.github)

v1.11.2

Compare Source

Bug Fixes
  • comment only on non fork (028aedc)

v1.11.1

Compare Source

Bug Fixes

v1.11.0

Compare Source

Features
  • multi-platform build support, sbom and provenance by default (#​68) (6486774)

v1.10.3

Compare Source

Miscellaneous Chores

v1.10.2

Compare Source

Bug Fixes

v1.10.1

Compare Source

CI/CD
Miscellaneous Chores

v1.10.0

Compare Source

Features

v1.9.2

Compare Source

Miscellaneous Chores

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Jul 1, 2024

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 9 0 0.16s
✅ CSHARP csharpier 46 0 3.3s
⚠️ CSHARP dotnet-format 46 46 644.91s
⚠️ CSHARP roslynator 5 2 74.07s
✅ DOCKERFILE hadolint 1 0 0.27s
✅ EDITORCONFIG editorconfig-checker 105 0 0.48s
✅ JSON jsonlint 9 0 0.35s
✅ JSON prettier 9 0 0.83s
✅ MARKDOWN markdownlint 3 0 0.72s
⚠️ MARKDOWN markdown-table-formatter 3 1 0.32s
✅ PROTOBUF protolint 5 0 7.1s
✅ REPOSITORY checkov yes no 16.59s
✅ REPOSITORY dustilock yes no 0.02s
✅ REPOSITORY gitleaks yes no 0.34s
✅ REPOSITORY git_diff yes no 0.1s
✅ REPOSITORY grype yes no 18.36s
✅ REPOSITORY kics yes no 17.38s
✅ REPOSITORY secretlint yes no 0.83s
✅ REPOSITORY syft yes no 0.53s
✅ REPOSITORY trivy yes no 9.19s
✅ REPOSITORY trivy-sbom yes no 1.24s
✅ REPOSITORY trufflehog yes no 3.6s
✅ XML xmllint 1 0 0.02s
✅ YAML prettier 24 0 2.25s
✅ YAML yamllint 24 0 2.29s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from 654ff17 to e80ba04 Compare July 9, 2024 17:09
@renovate renovate bot force-pushed the renovate/github-actions branch from e80ba04 to 075a4bc Compare July 10, 2024 11:37
Copy link
Contributor Author

renovate bot commented Jul 10, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Copy link

Trivy image scan report

ghcr.io/miracum/vfps:pr-147 (ubuntu 24.04)

4 known vulnerabilities found (HIGH: 0 MEDIUM: 4 LOW: 0 CRITICAL: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-33599 MEDIUM 2.39-0ubuntu8.1 2.39-0ubuntu8.2
libc6 CVE-2024-33600 MEDIUM 2.39-0ubuntu8.1 2.39-0ubuntu8.2
libc6 CVE-2024-33601 MEDIUM 2.39-0ubuntu8.1 2.39-0ubuntu8.2
libc6 CVE-2024-33602 MEDIUM 2.39-0ubuntu8.1 2.39-0ubuntu8.2

No Misconfigurations found

opt/vfps/Vfps.deps.json

1 known vulnerabilities found (MEDIUM: 0 LOW: 0 CRITICAL: 0 HIGH: 1)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
System.Text.Json CVE-2024-30105 HIGH 8.0.0 8.0.4

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/8.0.6/Microsoft.AspNetCore.App.deps.json

1 known vulnerabilities found (CRITICAL: 0 HIGH: 1 MEDIUM: 0 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
Microsoft.AspNetCore.App.Runtime.linux-x64 CVE-2024-35264 HIGH 8.0.6 8.0.7

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.6/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Copy link

github-actions bot commented Jul 10, 2024

Code Coverage

Package Line Rate Branch Rate Health
Vfps 94% 60%
Vfps.Tests 99% 100%
Summary 95% (442 / 463) 66% (33 / 50)

Minimum allowed line rate is 50%


ghz run statistics

Summary:
  Count:	5000
  Total:	9.28 s
  Slowest:	667.22 ms
  Fastest:	9.58 ms
  Average:	89.76 ms
  Requests/sec:	538.73

Response time histogram:
  9.578   [1]    |
  75.343  [1755] |∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎
  141.107 [2920] |∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎
  206.872 [263]  |∎∎∎∎
  272.637 [8]    |
  338.401 [3]    |
  404.166 [0]    |
  469.931 [6]    |
  535.695 [22]   |
  601.460 [20]   |
  667.225 [2]    |

Latency distribution:
  10 % in 47.64 ms 
  25 % in 63.81 ms 
  50 % in 85.77 ms 
  75 % in 99.73 ms 
  90 % in 122.54 ms 
  95 % in 162.98 ms 
  99 % in 273.96 ms 

Status code distribution:
  [OK]   5000 responses   

@chgl chgl merged commit 0178095 into master Jul 10, 2024
16 of 17 checks passed
@chgl chgl deleted the renovate/github-actions branch July 10, 2024 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant