Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update github-actions (major) (#719)
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v3.6.0` -> `v4.1.1` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | action | major | `v3.1.5` -> `v4.2.5` | | [actions/download-artifact](https://github.com/actions/download-artifact) | action | major | `v3.0.2` -> `v4.1.4` | | [actions/setup-node](https://github.com/actions/setup-node) | action | major | `v3` -> `v4` | | [actions/setup-node](https://github.com/actions/setup-node) | action | major | `v3.8.2` -> `v4.0.2` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v3.1.3` -> `v4.3.1` | | [github/codeql-action](https://github.com/github/codeql-action) | action | major | `v2.24.8` -> `v3.24.9` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | action | major | `v3` -> `v4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.1`](https://github.com/actions/checkout/releases/tag/v4.1.1) [Compare Source](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1) ##### What's Changed - Update CODEOWNERS to Launch team by [@​joshmgross](https://github.com/joshmgross) in [actions/checkout#1510 - Correct link to GitHub Docs by [@​peterbe](https://github.com/peterbe) in [actions/checkout#1511 - Link to release page from what's new section by [@​cory-miller](https://github.com/cory-miller) in [actions/checkout#1514 ##### New Contributors - [@​joshmgross](https://github.com/joshmgross) made their first contribution in [actions/checkout#1510 - [@​peterbe](https://github.com/peterbe) made their first contribution in [actions/checkout#1511 **Full Changelog**: actions/checkout@v4.1.0...v4.1.1 ### [`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0) - [Add support for partial checkout filters](https://github.com/actions/checkout/pull/1396) ### [`v4.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v400) [Compare Source](https://github.com/actions/checkout/compare/v3.6.0...v4.0.0) - [Support fetching without the --progress option](https://github.com/actions/checkout/pull/1067) - [Update to node20](https://github.com/actions/checkout/pull/1436) </details> <details> <summary>actions/dependency-review-action (actions/dependency-review-action)</summary> ### [`v4.2.5`](https://github.com/actions/dependency-review-action/releases/tag/v4.2.5): 4.2.5 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.2.4...v4.2.5) #### What's Changed - Fixed a bug where some configuration options in external files were not being properly picked up -- [actions/dependency-review-action#722 - Bump eslint from 8.56.0 to 8.57.0 **Full Changelog**: actions/dependency-review-action@v4.2.4...v4.2.5 ### [`v4.2.4`](https://github.com/actions/dependency-review-action/releases/tag/v4.2.4) [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4) #### What's Changed Fixed a bug in the output of OpenSSF cards for GitHub Actions. #### New Contributors - [@​sporkmonger](https://github.com/sporkmonger) made their first contribution in [actions/dependency-review-action#721 **Full Changelog**: actions/dependency-review-action@v4.2.3...v4.2.4 ### [`v4.2.3`](https://github.com/actions/dependency-review-action/releases/tag/v4.2.3): 4.2.3 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.1.3...v4.2.3) #### What's Changed - Set comment as output by [@​jsoref](https://github.com/jsoref) in [actions/dependency-review-action#698 - Add support for calculating OpenSSF Scorecards by [@​jhutchings1](https://github.com/jhutchings1) in [actions/dependency-review-action#709 - Add outputs for the changes data by [@​laughedelic](https://github.com/laughedelic) in [actions/dependency-review-action#707 #### New Contributors - [@​jhutchings1](https://github.com/jhutchings1) made their first contribution in [actions/dependency-review-action#709 - [@​laughedelic](https://github.com/laughedelic) made their first contribution in [actions/dependency-review-action#707 **Full Changelog**: actions/dependency-review-action@v4.1.3...v4.2.3 ### [`v4.1.3`](https://github.com/actions/dependency-review-action/releases/tag/v4.1.3): 4.1.3 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.1.2...v4.1.3) Fixes a bug in 4.1.2 that would introduce comments in every pull request, regardless of the user's configuration (see [actions/dependency-review-action#697). **Full Changelog**: actions/dependency-review-action@v4.1.2...v4.1.3 ### [`v4.1.2`](https://github.com/actions/dependency-review-action/releases/tag/v4.1.2): 4.1.2 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.1.1...v4.1.2) #### What's Changed - Expose dependency comment content by [@​jsoref](https://github.com/jsoref) in [actions/dependency-review-action#696 **Full Changelog**: actions/dependency-review-action@v4.1.1...v4.1.2 ### [`v4.1.1`](https://github.com/actions/dependency-review-action/releases/tag/v4.1.1): 4.1.1 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.1.0...v4.1.1) #### What's Changed - Bump `undici` to fix [GHSA-wqq4-5wpv-mx2g](https://github.com/nodejs/undici/security/advisories/GHSA-wqq4-5wpv-mx2g) - Bump [@​types/node](https://github.com/types/node) from 20.11.17 to 20.11.19 by [@​dependabot](https://github.com/dependabot) in [actions/dependency-review-action#693 **Full Changelog**: actions/dependency-review-action@v4.1.0...v4.1.1 ### [`v4.1.0`](https://github.com/actions/dependency-review-action/releases/tag/v4.1.0): 4.1.0 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.0.0...v4.1.0) #### What's Changed - Add `warn-only` by [@​tgrall](https://github.com/tgrall) in [actions/dependency-review-action#432 Added a new configuration option (`warn-only`, boolean) that makes the action always succeed while still displaying found vulnerabilities in the log. - Create stale.yaml by [@​jonjanego](https://github.com/jonjanego) in [actions/dependency-review-action#671 - Use manual codeql config by [@​juxtin](https://github.com/juxtin) in [actions/dependency-review-action#678 - Multiple dependency updates (see the changelog below for more information) #### New Contributors - [@​jonjanego](https://github.com/jonjanego) made their first contribution in [actions/dependency-review-action#671 - [@​tgrall](https://github.com/tgrall) made their first contribution in [actions/dependency-review-action#432 **Full Changelog**: actions/dependency-review-action@v4...v4.1.0 ### [`v4.0.0`](https://github.com/actions/dependency-review-action/releases/tag/v4.0.0) [Compare Source](https://github.com/actions/dependency-review-action/compare/v3.1.5...v4.0.0) - Update action to Node 20 by [@​takost](https://github.com/takost) in [actions/dependency-review-action#639 - Dependabot updates, see the full changelog for more details. #### New Contributors - [@​takost](https://github.com/takost) made their first contribution in [actions/dependency-review-action#639 **Full Changelog**: actions/dependency-review-action@v3.1.5...v4.0.0 </details> <details> <summary>actions/download-artifact (actions/download-artifact)</summary> ### [`v4.1.4`](https://github.com/actions/download-artifact/releases/tag/v4.1.4) [Compare Source](https://github.com/actions/download-artifact/compare/v4.1.3...v4.1.4) ##### What's Changed - Update [@​actions/artifact](https://github.com/actions/artifact) by [@​bethanyj28](https://github.com/bethanyj28) in [actions/download-artifact#307 **Full Changelog**: actions/download-artifact@v4...v4.1.4 ### [`v4.1.3`](https://github.com/actions/download-artifact/releases/tag/v4.1.3) [Compare Source](https://github.com/actions/download-artifact/compare/v4.1.2...v4.1.3) ##### What's Changed - Update release-new-action-version.yml by [@​konradpabjan](https://github.com/konradpabjan) in [actions/download-artifact#292 - Update toolkit dependency with updated unzip logic by [@​bethanyj28](https://github.com/bethanyj28) in [actions/download-artifact#299 - Update [@​actions/artifact](https://github.com/actions/artifact) by [@​bethanyj28](https://github.com/bethanyj28) in [actions/download-artifact#303 ##### New Contributors - [@​bethanyj28](https://github.com/bethanyj28) made their first contribution in [actions/download-artifact#299 **Full Changelog**: actions/download-artifact@v4...v4.1.3 ### [`v4.1.2`](https://github.com/actions/download-artifact/releases/tag/v4.1.2) [Compare Source](https://github.com/actions/download-artifact/compare/v4.1.1...v4.1.2) - Bump [@​actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](https://github.com/actions/toolkit/pull/1648) ### [`v4.1.1`](https://github.com/actions/download-artifact/releases/tag/v4.1.1) [Compare Source](https://github.com/actions/download-artifact/compare/v4.1.0...v4.1.1) - Fix transient request timeouts [actions/download-artifact#249 - Bump `@actions/artifacts` to latest version ### [`v4.1.0`](https://github.com/actions/download-artifact/releases/tag/v4.1.0) [Compare Source](https://github.com/actions/download-artifact/compare/v4.0.0...v4.1.0) #### What's Changed - Some cleanup by [@​robherley](https://github.com/robherley) in [actions/download-artifact#247 - Fix default for run-id by [@​stchr](https://github.com/stchr) in [actions/download-artifact#252 - Support pattern matching to filter artifacts & merge to same directory by [@​robherley](https://github.com/robherley) in [actions/download-artifact#259 #### New Contributors - [@​stchr](https://github.com/stchr) made their first contribution in [actions/download-artifact#252 **Full Changelog**: actions/download-artifact@v4...v4.1.0 ### [`v4.0.0`](https://github.com/actions/download-artifact/releases/tag/v4.0.0) [Compare Source](https://github.com/actions/download-artifact/compare/v3.0.2...v4.0.0) #### What's Changed The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements. ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads *must* use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows. For more information, please see: 1. The [changelog](https://github.blog/changelog/2023-12-14-github-actions-artifacts-v4-is-now-generally-available/) post. 2. The [README](https://github.com/actions/download-artifact/blob/main/README.md). 3. The [migration documentation](https://github.com/actions/upload-artifact/blob/main/docs/MIGRATION.md). 4. As well as the underlying npm package, [@​actions/artifact](https://github.com/actions/toolkit/tree/main/packages/artifact) documentation. #### New Contributors - [@​bflad](https://github.com/bflad) made their first contribution in [actions/download-artifact#194 **Full Changelog**: actions/download-artifact@v3...v4.0.0 </details> <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v4`](https://github.com/actions/setup-node/compare/v3...v4) [Compare Source](https://github.com/actions/setup-node/compare/v3...v4) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v4.3.1`](https://github.com/actions/upload-artifact/releases/tag/v4.3.1) [Compare Source](https://github.com/actions/upload-artifact/compare/v4.3.0...v4.3.1) - Bump [@​actions/artifacts](https://github.com/actions/artifacts) to latest version to include [updated GHES host check](https://github.com/actions/toolkit/pull/1648) ### [`v4.3.0`](https://github.com/actions/upload-artifact/releases/tag/v4.3.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v4.2.0...v4.3.0) ##### What's Changed - Reorganize upload code in prep for merge logic & add more tests by [@​robherley](https://github.com/robherley) in [actions/upload-artifact#504 - Add sub-action to merge artifacts by [@​robherley](https://github.com/robherley) in [actions/upload-artifact#505 **Full Changelog**: actions/upload-artifact@v4...v4.3.0 ### [`v4.2.0`](https://github.com/actions/upload-artifact/releases/tag/v4.2.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v4.1.0...v4.2.0) ##### What's Changed - Ability to overwrite an Artifact by [@​robherley](https://github.com/robherley) in [actions/upload-artifact#501 **Full Changelog**: actions/upload-artifact@v4...v4.2.0 ### [`v4.1.0`](https://github.com/actions/upload-artifact/releases/tag/v4.1.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v4.0.0...v4.1.0) #### What's Changed - Add migrations docs by [@​robherley](https://github.com/robherley) in [actions/upload-artifact#482 - Update README.md by [@​samuelwine](https://github.com/samuelwine) in [actions/upload-artifact#492 - Support artifact-url output by [@​konradpabjan](https://github.com/konradpabjan) in [actions/upload-artifact#496 - Update readme to reflect new 500 artifact per job limit by [@​robherley](https://github.com/robherley) in [actions/upload-artifact#497 #### New Contributors - [@​samuelwine](https://github.com/samuelwine) made their first contribution in [actions/upload-artifact#492 **Full Changelog**: actions/upload-artifact@v4...v4.1.0 ### [`v4.0.0`](https://github.com/actions/upload-artifact/releases/tag/v4.0.0) [Compare Source](https://github.com/actions/upload-artifact/compare/v3.1.3...v4.0.0) #### What's Changed The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements. For more information, see the [@​actions/artifact](https://github.com/actions/toolkit/tree/main/packages/artifact) documentation. #### New Contributors - [@​vmjoseph](https://github.com/vmjoseph) made their first contribution in [actions/upload-artifact#464 **Full Changelog**: actions/upload-artifact@v3...v4.0.0 </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.24.9`](https://github.com/github/codeql-action/compare/v3.24.8...v3.24.9) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.8...v3.24.9) ### [`v3.24.8`](https://github.com/github/codeql-action/compare/v3.24.7...v3.24.8) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.7...v3.24.8) ### [`v3.24.7`](https://github.com/github/codeql-action/compare/v3.24.6...v3.24.7) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.6...v3.24.7) ### [`v3.24.6`](https://github.com/github/codeql-action/compare/v3.24.5...v3.24.6) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.5...v3.24.6) ### [`v3.24.5`](https://github.com/github/codeql-action/compare/v3.24.4...v3.24.5) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.4...v3.24.5) ### [`v3.24.4`](https://github.com/github/codeql-action/compare/v3.24.3...v3.24.4) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.3...v3.24.4) ### [`v3.24.3`](https://github.com/github/codeql-action/compare/v3.24.2...v3.24.3) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.2...v3.24.3) ### [`v3.24.2`](https://github.com/github/codeql-action/compare/v3.24.1...v3.24.2) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.1...v3.24.2) ### [`v3.24.1`](https://github.com/github/codeql-action/compare/v3.24.0...v3.24.1) [Compare Source](https://github.com/github/codeql-action/compare/v3.24.0...v3.24.1) ### [`v3.24.0`](https://github.com/github/codeql-action/compare/v3.23.2...v3.24.0) [Compare Source](https://github.com/github/codeql-action/compare/v3.23.2...v3.24.0) ### [`v3.23.2`](https://github.com/github/codeql-action/compare/v3.23.1...v3.23.2) [Compare Source](https://github.com/github/codeql-action/compare/v3.23.1...v3.23.2) ### [`v3.23.1`](https://github.com/github/codeql-action/compare/v3.23.0...v3.23.1) [Compare Source](https://github.com/github/codeql-action/compare/v3.23.0...v3.23.1) ### [`v3.23.0`](https://github.com/github/codeql-action/compare/v3.22.12...v3.23.0) [Compare Source](https://github.com/github/codeql-action/compare/v3.22.12...v3.23.0) ### [`v3.22.12`](https://github.com/github/codeql-action/compare/v3.22.11...v3.22.12) [Compare Source](https://github.com/github/codeql-action/compare/v3.22.11...v3.22.12) ### [`v3.22.11`](https://github.com/github/codeql-action/compare/v2.22.11...v3.22.11) [Compare Source](https://github.com/github/codeql-action/compare/v2.24.9...v3.22.11) ### [`v2.24.9`](https://github.com/github/codeql-action/compare/v2.24.8...v2.24.9) [Compare Source](https://github.com/github/codeql-action/compare/v2.24.8...v2.24.9) </details> <details> <summary>golangci/golangci-lint-action (golangci/golangci-lint-action)</summary> ### [`v4`](https://github.com/golangci/golangci-lint-action/compare/v3...v4) [Compare Source](https://github.com/golangci/golangci-lint-action/compare/v3...v4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/slsa-framework/slsa-verifier). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Signed-off-by: Mend Renovate <bot@renovateapp.com>
- Loading branch information