Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 20, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/cache action major v4.2.1 -> v5.0.1 age confidence
actions/checkout action major v4.2.2 -> v6.0.1 age confidence
actions/setup-go action major v5.3.0 -> v6.1.0 age confidence
actions/upload-artifact action major v4.6.0 -> v6.0.0 age confidence
anchore/sbom-action action minor v0.18.0 -> v0.21.0 age confidence
cgr.dev/chainguard/static final digest 853bfd4 -> a301031
dessant/lock-threads action major v5.0.1 -> v6.0.0 age confidence
docker/login-action action minor v3.3.0 -> v3.6.0 age confidence
docker/setup-qemu-action action minor v3.4.0 -> v3.7.0 age confidence
github.com/morikuni/aec require minor v1.0.0 -> v1.1.0 age confidence
github.com/olekukonko/tablewriter require major v0.0.5 -> v1.1.2 age confidence
github.com/spf13/cobra require minor v1.9.1 -> v1.10.2 age confidence
github/codeql-action action major v3.28.9 -> v4.31.9 age confidence
go uses-with minor 1.21.x -> 1.25.x age confidence
go.uber.org/zap require patch v1.27.0 -> v1.27.1 age confidence
goreleaser/goreleaser-action action minor v6.2.1 -> v6.4.0 age confidence
ossf/scorecard-action action patch v2.4.0 -> v2.4.3 age confidence
sigs.k8s.io/yaml require minor v1.4.0 -> v1.6.0 age confidence
sigstore/cosign-installer action major v3.8.0 -> v4.0.0 age confidence

Release Notes

actions/cache (actions/cache)

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

actions/checkout (actions/checkout)

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed
⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-go (actions/setup-go)

v6.1.0

Compare Source

What's Changed

Enhancements
Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

v6.0.0

Compare Source

What's Changed
Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades
New Contributors

Full Changelog: actions/setup-go@v5...v6.0.0

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Bug fixes:
Dependency updates:

New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Dependency updates :

New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

actions/upload-artifact (actions/upload-artifact)

v6.0.0

Compare Source

v5.0.0

Compare Source

v4.6.2

Compare Source

What's Changed

  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

anchore/sbom-action (anchore/sbom-action)

v0.21.0

Compare Source

v0.20.11

Compare Source

Changes in v0.20.11

v0.20.10

Compare Source

Changes in v0.20.10

v0.20.9

Compare Source

Changes in v0.20.9

v0.20.8

Compare Source

Changes in v0.20.8

v0.20.7

Compare Source

Changes in v0.20.7

  • chore(deps): update Syft to v1.34.1 (#​544)

v0.20.6

Compare Source

Changes in v0.20.6

v0.20.5

Compare Source

Changes in v0.20.5

v0.20.4

Compare Source

Changes in v0.20.4

  • chore: update Syft to v1.29.0 (#​529)

v0.20.3

Compare Source

Changes in v0.20.3

v0.20.2

Compare Source

Changes in v0.20.2

v0.20.1

Compare Source

Changes in v0.20.1

v0.20.0

Compare Source

Changes in v0.20.0

  • chore(deps): update Syft to v1.24.0 (#​522)

v0.19.0

Compare Source

Changes in v0.19.0

  • chore(deps): update Syft to v1.23.0 (#​521)
  • chore(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8 (#​519)
  • chore(deps): bump cross-spawn (#​514)
dessant/lock-threads (dessant/lock-threads)

v6.0.0

Compare Source

Learn more about this release from the changelog.

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Compare Source

Full Changelog: docker/login-action@v3.3.0...v3.4.0

docker/setup-qemu-action (docker/setup-qemu-action)

v3.7.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

morikuni/aec (github.com/morikuni/aec)

v1.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: morikuni/aec@v1.0.0...v1.1.0

olekukonko/tablewriter (github.com/olekukonko/tablewriter)

v1.1.2

Compare Source

v1.1.1

Compare Source

v1.1.0

Compare Source

v1.0.9

Compare Source

v1.0.8

Compare Source

v1.0.7

Compare Source

v1.0.6

Compare Source

v1.0.5

Compare Source

v1.0.4

Compare Source

v1.0.3

Compare Source

v1.0.2

Compare Source

v1.0.1

Compare Source

v1.0.0

Compare Source

spf13/cobra (github.com/spf13/cobra)

v1.10.2

Compare Source

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in #​2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

Compare Source

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features
🐛 Fix
🪠 Testing
📝 Docs

New Contributors

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

github/codeql-action (github/codeql-action)

v4.31.9

Compare Source

v4.31.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025
  • Update default CodeQL bundle version to 2.23.8. #​3354

See the full CHANGELOG.md for more information.

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025
  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

v4.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025
  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

v4.31.2

Compare Source

v4.31.1

Compare Source

v4.31.0

Compare Source

v4.30.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025
  • Update default CodeQL bundle version to 2.23.3. #​3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​3204

See the full CHANGELOG.md for more information.

v4.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.30.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.7 - 06 Oct 2025

  • [v4+ only] The CodeQL Action now runs on Node.js v24. #​3169

See the full CHANGELOG.md for more information.

v3.31.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dirien as a code owner February 20, 2025 23:04
@renovate renovate bot changed the title chore(deps): update sigstore/cosign-installer action to v3.8.1 chore(deps): update all dependencies Feb 21, 2025
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from d50d975 to b31cfdb Compare February 26, 2025 16:26
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 1756a8e to 604876e Compare March 5, 2025 19:05
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 83c1848 to 47094a0 Compare March 14, 2025 10:14
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from a7274d7 to a241b9e Compare March 24, 2025 19:35
@pull-request-size pull-request-size bot added size/M and removed size/S labels Mar 30, 2025
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 3b9beac to 4dae47e Compare April 1, 2025 18:47
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 263e61f to a827c6d Compare November 17, 2025 23:13
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 7c9eaf7 to 8e17163 Compare November 24, 2025 13:40
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 68afc0d to b2d55d7 Compare December 5, 2025 17:52
@renovate
Copy link
Contributor Author

renovate bot commented Dec 10, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/mattn/go-runewidth v0.0.13 -> v0.0.19
github.com/spf13/pflag v1.0.6 -> v1.0.9

@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 15c2970 to 18892df Compare December 17, 2025 02:27
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 46d3aa6 to 2edd162 Compare December 24, 2025 18:44
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@sonarqubecloud
Copy link

@dirien dirien closed this Dec 24, 2025
@github-actions
Copy link

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jan 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant