Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update github-actions (#1940)
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | minor | `v3.3.0` -> `v3.5.0` | | [github/codeql-action](https://github.com/github/codeql-action) | action | patch | `v2.2.9` -> `v2.2.11` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | action | patch | `v3.0.1` -> `v3.0.2` | --- ### ⚠ Dependency Lookup Warnings ⚠ Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.5.0`](https://github.com/actions/checkout/releases/tag/v3.5.0) [Compare Source](https://github.com/actions/checkout/compare/v3.4.0...v3.5.0) #### What's Changed - Add new public key for known_hosts by [@​cdb](https://github.com/cdb) in [actions/checkout#1237 #### New Contributors - [@​cdb](https://github.com/cdb) made their first contribution in [actions/checkout#1237 **Full Changelog**: actions/checkout@v3.4.0...v3.5.0 ### [`v3.4.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) [Compare Source](https://github.com/actions/checkout/compare/v3.3.0...v3.4.0) - [Upgrade codeql actions to v2](https://github.com/actions/checkout/pull/1209) - [Upgrade dependencies](https://github.com/actions/checkout/pull/1210) - [Upgrade @​actions/io](https://github.com/actions/checkout/pull/1225) </details> <details> <summary>github/codeql-action</summary> ### [`v2.2.11`](https://github.com/github/codeql-action/compare/v2.2.10...v2.2.11) [Compare Source](https://github.com/github/codeql-action/compare/v2.2.10...v2.2.11) ### [`v2.2.10`](https://github.com/github/codeql-action/compare/v2.2.9...v2.2.10) [Compare Source](https://github.com/github/codeql-action/compare/v2.2.9...v2.2.10) </details> <details> <summary>sigstore/cosign-installer</summary> ### [`v3.0.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.2) [Compare Source](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2) ##### What's Changed - add --yes to example workflow by [@​sebhoss](https://github.com/sebhoss) in [sigstore/cosign-installer#110 - Fix aarch64 action run by [@​ananos](https://github.com/ananos) in [sigstore/cosign-installer#113 - Bump actions/checkout from 3.3.0 to 3.4.0 by [@​dependabot](https://github.com/dependabot) in [sigstore/cosign-installer#115 - Bump actions/setup-go from 3.5.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot) in [sigstore/cosign-installer#114 - Bump actions/checkout from 3.4.0 to 3.5.0 by [@​dependabot](https://github.com/dependabot) in [sigstore/cosign-installer#116 - default cosign to v2.0.1 by [@​cpanato](https://github.com/cpanato) in [sigstore/cosign-installer#117 ##### New Contributors - [@​sebhoss](https://github.com/sebhoss) made their first contribution in [sigstore/cosign-installer#110 - [@​ananos](https://github.com/ananos) made their first contribution in [sigstore/cosign-installer#113 **Full Changelog**: sigstore/cosign-installer@v3...v3.0.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/slsa-framework/slsa-github-generator). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4zMS40IiwidXBkYXRlZEluVmVyIjoiMzUuMzEuNCJ9--> Signed-off-by: Renovate Bot <bot@renovateapp.com>
- Loading branch information