chore(deps): update all non-major dependencies by renovate-bot · Pull Request #219 · GoogleCloudPlatform/functions-framework-ruby · GitHub | Latest TMZ Celebrity News & Gossip | Watch TMZ Live
Skip to content

chore(deps): update all non-major dependencies #219

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update all non-major dependencies #219

wants to merge 1 commit into from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Apr 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/dependency-review-action action minor v4.5.0 -> v4.7.1 age adoption passing confidence
actions/setup-go action minor v5.3.0 -> v5.5.0 age adoption passing confidence
github/codeql-action action minor v3.28.11 -> v3.29.2 age adoption passing confidence
google-style minor "~> 1.30.1" -> "~> 1.31.0" age adoption passing confidence
ossf/scorecard-action action patch v2.4.1 -> v2.4.2 age adoption passing confidence
ruby/setup-ruby action minor v1.225.0 -> v1.245.0 age adoption passing confidence
step-security/harden-runner action minor v2.11.0 -> v2.12.2 age adoption passing confidence

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.7.1

Compare Source

  • Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #​889
  • License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

v4.7.0

Compare Source

  • Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #​809 and probably others)
  • Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

v4.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed
Dependency updates :
New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

github/codeql-action (github/codeql-action)

v3.29.2

Compare Source

v3.29.1

Compare Source

v3.29.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

  • Update default CodeQL bundle version to 2.22.0. #​2925
  • Bump minimum CodeQL bundle version to 2.16.6. #​2912

See the full CHANGELOG.md for more information.

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

  • The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
    The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
    your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
    actions analysis.
  • Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #​2893
  • Skip validating SARIF produced by CodeQL for improved performance. #​2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025
  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025
  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

googleapis/ruby-style (google-style)

v1.31.1

Bug Fixes
  • rename cop to eliminate extra warnings (#​90)

v1.31.0

Features
  • update ruby version, audit some cops (#​88)
ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

ruby/setup-ruby (ruby/setup-ruby)

v1.245.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.244.0...v1.245.0

v1.244.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.243.0...v1.244.0

v1.243.0

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.242.0...v1.243.0

v1.242.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.241.0...v1.242.0

v1.241.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.240.0...v1.241.0

v1.240.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.239.0...v1.240.0

v1.239.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.238.0...v1.239.0

v1.238.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.237.0...v1.238.0

v1.237.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.236.0...v1.237.0

v1.236.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.235.0...v1.236.0

v1.235.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.234.0...v1.235.0

v1.234.0

Compare Source

Full Changelog: ruby/setup-ruby@v1.233.0...v1.234.0

v1.233.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.232.0...v1.233.0

v1.232.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.231.0...v1.232.0

v1.231.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.230.0...v1.231.0

v1.230.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.229.0...v1.230.0

v1.229.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.228.0...v1.229.0

v1.228.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.227.0...v1.228.0

v1.227.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.226.0...v1.227.0

v1.226.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.225.0...v1.226.0

step-security/harden-runner (step-security/harden-runner)

v2.12.2

Compare Source

What's Changed

Added HTTPS Monitoring for additional destinations - *.githubusercontent.com
Bug fixes:

  • Implicitly allow local multicast, local unicast and broadcast IP addresses in block mode
  • Increased policy map size for block mode

Full Changelog: step-security/harden-runner@v2...v2.12.2

v2.12.1

Compare Source

What's Changed
  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1

v2.12.0

Compare Source

What's Changed

  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0

v2.11.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.11.1

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 45029df to 6da35a4 Compare April 8, 2025 00:43
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 22a3791 to 589d042 Compare April 18, 2025 09:34
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from fe7f123 to df3e94a Compare April 26, 2025 12:44
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 928636d to 0e37f69 Compare May 2, 2025 12:38
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 485e7fd to dc55a2c Compare May 14, 2025 21:36
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 4fa028b to 6cd92f0 Compare May 21, 2025 10:38
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 6cd92f0 to 66de28c Compare June 1, 2025 03:20
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 66de28c to e284ae5 Compare June 18, 2025 10:13
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from e284ae5 to 62215a3 Compare July 1, 2025 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@renovate-bot

TMZ Celebrity News – Breaking Stories, Videos & Gossip

Looking for the latest TMZ celebrity news? You've come to the right place. From shocking Hollywood scandals to exclusive videos, TMZ delivers it all in real time.

Whether it’s a red carpet slip-up, a viral paparazzi moment, or a legal drama involving your favorite stars, TMZ news is always first to break the story. Stay in the loop with daily updates, insider tips, and jaw-dropping photos.

🎥 Watch TMZ Live

TMZ Live brings you daily celebrity news and interviews straight from the TMZ newsroom. Don’t miss a beat—watch now and see what’s trending in Hollywood.