chore(deps): Update actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
balazsorban44/nissuer	action	minor	1.7.3 -> 1.10.0
webfactory/ssh-agent	action	minor	v0.5.4 -> v0.9.0

---

Release Notes

balazsorban44/nissuer (balazsorban44/nissuer)

v1.10.0

Compare Source

Full Changelog: balazsorban44/nissuer@1.9.3...1.10.0

v1.9.3

Compare Source

Full Changelog: balazsorban44/nissuer@1.9.2...1.9.3

v1.9.2

Compare Source

Full Changelog: balazsorban44/nissuer@1.9.1...1.9.2

v1.9.1

Compare Source

Full Changelog: balazsorban44/nissuer@1.9.0...1.9.1

v1.9.0

Compare Source

Full Changelog: balazsorban44/nissuer@1.8.2...1.9.0

v1.8.2

Compare Source

Full Changelog: balazsorban44/nissuer@1.8.1...1.8.2

v1.8.1

Compare Source

Fix https://github.com/balazsorban44/nissuer/releases/tag/1.8.0 by actually shipping the built version

v1.8.0

Compare Source

Features

• do not hide comments from organization members (2d5aa95)
• add blocklist option (eb4bf4b)
• docs: update readme and action (6163c40)

Other changes

• bump dependencies (6114e48)

webfactory/ssh-agent (webfactory/ssh-agent)

v0.9.0: Update to node20

Compare Source

This release updates the action to run on Node.js v20. When you're running on GitHub hosted runners, just go ahead and update. When you're using self-hosted runners, please make sure you have Node.js v20 installed before updating from v0.8.0 to v0.9.0 of this action.

New Contributors

• @​npwolf made their first contribution in https://github.com/webfactory/ssh-agent/pull/196
• @​benzado made their first contribution in https://github.com/webfactory/ssh-agent/pull/206
• @​felix-seifert made their first contribution in https://github.com/webfactory/ssh-agent/pull/199
• @​archen made their first contribution in https://github.com/webfactory/ssh-agent/pull/201

Full Changelog: webfactory/ssh-agent@v0.8.0...v0.9.0

What's Changed

• Update README.md to reflect latest version by @​npwolf in https://github.com/webfactory/ssh-agent/pull/196
• Remove outdated claim from README by @​benzado in https://github.com/webfactory/ssh-agent/pull/206
• chore: update all versions of actions/checkout to v4 by @​felix-seifert in https://github.com/webfactory/ssh-agent/pull/199
• bump to node20 by @​archen in https://github.com/webfactory/ssh-agent/pull/201

New Contributors

• @​npwolf made their first contribution in https://github.com/webfactory/ssh-agent/pull/196
• @​benzado made their first contribution in https://github.com/webfactory/ssh-agent/pull/206
• @​felix-seifert made their first contribution in https://github.com/webfactory/ssh-agent/pull/199
• @​archen made their first contribution in https://github.com/webfactory/ssh-agent/pull/201

Full Changelog: webfactory/ssh-agent@v0.8.0...v0.9.0

v0.8.0: SSH host keys no longer managed – read below 👇

Compare Source

Starting with this release, this action no longer writes GitHub's SSH host keys into the known_hosts SSH config file upon start.

GitHub changed their host keys on short notice this morning, see https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. We took this as an opportunity to stop maintaining GH SSH keys in the code shipped with this action (#​171).

What you need to do:

• On GitHub hosted runners, nothing. ✔︎ These runners ship with SSH host keys (for github.com) maintained by directly by GitHub.
• On self-hosted runners, review and fix your SSH known_hosts file:
  • First, you'll find it bloated with redundant entries for github.com, as described in #​106. Remove these entries.
  • Review https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. You probably removed the old (invalid) SSH key in the previous step.
  • Configure GitHub's current SSH keys as documented on https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
  • As long as versions before v0.8.0 of this action here are run on the self-hosted runner, the old entries will come back. Keep an eye on it, possibly you'll have to rinse & repeat.

Other code changes in this release

• Update to actions/checkout@v3 by @​mpdude in https://github.com/webfactory/ssh-agent/pull/143
• Allow the user to override the commands for git, ssh-agent, and ssh-add by @​DilumAluthge in https://github.com/webfactory/ssh-agent/pull/154

New Contributors

• @​prhiggins made their first contribution in https://github.com/webfactory/ssh-agent/pull/153
• @​kjarkur made their first contribution in https://github.com/webfactory/ssh-agent/pull/147
• @​DilumAluthge made their first contribution in https://github.com/webfactory/ssh-agent/pull/154

Full Changelog: webfactory/ssh-agent@v0.7.0...v0.8.0

v0.7.0

Compare Source

Added

• Add the log-public-key input that can be used to turn off logging key identities (#​122)

Fixed

• Fix path to git binary on Windows, assuming GitHub-hosted runners (#​136, #​137)
• Fix a nonsensical log message (#​139)

v0.6.0

Compare Source

Changed

• Update the version of Node used by the action from 12 to 16 (https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[changeset-bot]

⚠️ No Changeset found

Latest commit: c8a6a2d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[codspeed-hq]

CodSpeed Performance Report

Merging #9311 will not alter performance

_{Comparing renovate/actions (c8a6a2d) with main (96ebdc5)}

Summary

✅ 178 untouched benchmarks