chore(deps): update all non-major dependencies #257

renovate-bot · 2023-07-01T03:34:20Z

This PR contains the following updates:

Package	Type	Update	Change
GoogleCloudPlatform/functions-framework-conformance	action	patch	`v1.8.3` -> `v1.8.5`
actions/checkout	action	patch	`v3.5.2` -> `v3.5.3`
actions/dependency-review-action	action	patch	`v3.0.6` -> `v3.0.8`
actions/setup-go	action	minor	`v4.0.1` -> `v4.1.0`
actions/setup-python	action	minor	`v4.6.1` -> `v4.7.0`
github/codeql-action	action	minor	`v2.3.6` -> `v2.21.4`
ossf/scorecard-action	action	minor	`v2.1.3` -> `v2.2.0`
step-security/harden-runner	action	minor	`v2.4.0` -> `v2.5.1`

Release Notes

GoogleCloudPlatform/functions-framework-conformance (GoogleCloudPlatform/functions-framework-conformance)

`v1.8.5`

Compare Source

Client

Add support for the specification of a custom builder image to use via new -builder-url flag.

`v1.8.4`

Compare Source

Client

Adds support for specifying runtime version using the builder-runtime-version flag.

actions/checkout (actions/checkout)

`v3.5.3`

Compare Source

actions/dependency-review-action (actions/dependency-review-action)

`v3.0.8`: 3.0.8

Compare Source

What's Changed

Added on-failure option to comment-summary-in-pr setting by @sgmurphy in https://github.com/actions/dependency-review-action/pull/540

Previous configuration files using true/false for comment-summary-in-pr will be mapped automatically to the new values, but we encourage you to update to always/on-failure/never.

actions/setup-go (actions/setup-go)

`v4.1.0`

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

Remove implicit dependencies by @nikolai-laevskii in https://github.com/actions/setup-go/pull/378
Update action.yml by @mkelly in https://github.com/actions/setup-go/pull/379
Added a description that go-version should be specified as a string type by @n3xem in https://github.com/actions/setup-go/pull/367
Add note about YAML parsing versions by @dmitry-shibanov in https://github.com/actions/setup-go/pull/382
Automatic update of configuration files from 05/23/2023 by @github-actions in https://github.com/actions/setup-go/pull/377
Bump tough-cookie and @azure/ms-rest-js by @dependabot in https://github.com/actions/setup-go/pull/392
Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in https://github.com/actions/setup-go/pull/397
Bump semver from 6.3.0 to 6.3.1 by @dependabot in https://github.com/actions/setup-go/pull/396

New Contributors

@mkelly made their first contribution in https://github.com/actions/setup-go/pull/379
@n3xem made their first contribution in https://github.com/actions/setup-go/pull/367

Full Changelog: actions/setup-go@v4...v4.1.0

actions/setup-python (actions/setup-python)

`v4.7.0`

Compare Source

In scope of this release, the support for reading python version from pyproject.toml was added (https://github.com/actions/setup-python/pull/669).

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version-file: pyproject.toml

Besides, it includes such changes as:

Bump tough-cookie and @azure/ms-rest-js by @dependabot in https://github.com/actions/setup-python/pull/697
Bump semver from 7.3.8 to 7.5.2 by @dependabot in https://github.com/actions/setup-python/pull/692
Fix typos found by codespell by @DimitriPapadopoulos in https://github.com/actions/setup-python/pull/650

New Contributors

@dariocurr made their first contribution in https://github.com/actions/setup-python/pull/669
@DimitriPapadopoulos made their first contribution in https://github.com/actions/setup-python/pull/650

Full Changelog: actions/setup-python@v4...v4.7.0

github/codeql-action (github/codeql-action)

`v2.21.4`

Compare Source

`v2.21.3`

Compare Source

`v2.21.2`

Compare Source

`v2.21.1`

Compare Source

`v2.21.0`

Compare Source

`v2.20.4`

Compare Source

`v2.20.3`

Compare Source

`v2.20.2`

Compare Source

`v2.20.1`

Compare Source

`v2.20.0`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.2.0`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1192

Scorecard Result Viewer

Thanks to contributions from @cynthia-sg and @tegioz at CLOMonitor, there is a new Scorecard Result visualization page at https://securityscorecards.dev/viewer/?uri=<project-url>.

As an example, you can see our own score visualized here
Checkout our README to learn how to link your README badge to the new visualization page.

Publishing Results

This release contains two fixes which will improve the user experience when publish_results is true

Runs that fail our workflow restrictions will fail with a 400 response indicating the problem, instead of a vague 500 status. (https://github.com/ossf/scorecard-action/pull/1156, resolved https://github.com/ossf/scorecard-action/issues/1150)
Scorecard action will retry when signing results and submitting them to our web API. This should help with flakiness from connection failures. (https://github.com/ossf/scorecard-action/pull/1191)

Docs

📖 Update README to accept fine-grained tokens by @pnacht in https://github.com/ossf/scorecard-action/pull/1175
📖 Update installation instructions to match current GitHub UI by @joycebrum in https://github.com/ossf/scorecard-action/pull/1153
📖 Document the GitHub action workflow restrictions when publishing results. by @spencerschrock in

New Contributors

@bobcallaway made their first contribution in https://github.com/ossf/scorecard-action/pull/1140
@pnacht made their first contribution in https://github.com/ossf/scorecard-action/pull/1175

Full Changelog: ossf/scorecard-action@v2.1.3...v2.2.0

step-security/harden-runner (step-security/harden-runner)

`v2.5.1`

Compare Source

What's Changed

Updated default allowed endpoints to include *.actions.githubusercontent.com. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints.
Update README.md by @varunsh-coder in https://github.com/step-security/harden-runner/pull/326
Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @dependabot in https://github.com/step-security/harden-runner/pull/327

Full Changelog: step-security/harden-runner@v2...v2.5.1

`v2.5.0`

Compare Source

What's Changed

Release v2.5.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/325

This release:

Adds support for Actions Runner Controller (ARC) environment
Improves the job summary markdown

Full Changelog: step-security/harden-runner@v2...v2.5.0

`v2.4.1`

Compare Source

What's Changed

Release v2.4.1 by @varunsh-coder and @Devils-Knight in https://github.com/step-security/harden-runner/pull/309

This release

Shows a preview of the network events in the job summary markdown
Uses a fallback DNS service from Cloudflare in addition to Google DNS to improve reliability

Full Changelog: step-security/harden-runner@v2...v2.4.1

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

blunderbuss-gcf bot assigned janell-chen Jul 1, 2023

renovate-bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 8dc3aa4 to 25f7a3c Compare July 6, 2023 17:30

renovate-bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 9140396 to d052e61 Compare July 14, 2023 14:08

renovate-bot force-pushed the renovate/all-minor-patch branch from d052e61 to aa2aca4 Compare August 14, 2023 22:30

chore(deps): update all non-major dependencies

25d48c4

renovate-bot force-pushed the renovate/all-minor-patch branch from aa2aca4 to 25d48c4 Compare August 15, 2023 11:20

kenneth-rosario approved these changes Aug 21, 2023

View reviewed changes

kenneth-rosario merged commit a7076a6 into GoogleCloudPlatform:main Aug 21, 2023

renovate-bot deleted the renovate/all-minor-patch branch August 21, 2023 15:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #257

chore(deps): update all non-major dependencies #257

Uh oh!

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #257

chore(deps): update all non-major dependencies #257

Uh oh!

Conversation

Uh oh!

Release Notes

Client

Client

v3.0.8: 3.0.8

What's Changed

New Contributors

v3.0.7: 3.0.7

What's Changed

New Contributors

What's Changed

New Contributors

Besides, it includes such changes as:

New Contributors

What's Changed

Scorecard Result Viewer

Publishing Results

Docs

New Contributors

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

Uh oh!

`v3.0.8`: 3.0.8

`v3.0.7`: 3.0.7