From f1536a1f7e0c19b0ba885d28cc84245c47b29eee Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 21 Feb 2025 20:27:38 +0000 Subject: [PATCH] chore(deps): update maru support dependencies | datasource | package | from | to | | ----------- | ------------------------------- | ------- | -------- | | github-tags | actions/create-github-app-token | v1.11.1 | v1.11.5 | | github-tags | actions/setup-go | v5.2.0 | v5.3.0 | | github-tags | actions/setup-node | v4.1.0 | v4.2.0 | | github-tags | actions/upload-artifact | v4.6.0 | v4.6.1 | | github-tags | anchore/sbom-action | v0.17.9 | v0.18.0 | | github-tags | github/codeql-action | v3.28.1 | v3.28.10 | | github-tags | goreleaser/goreleaser-action | v6.1.0 | v6.2.1 | | github-tags | ossf/scorecard-action | v2.4.0 | v2.4.1 | | github-tags | zarf-dev/zarf | v0.46.0 | v0.49.0 | --- .github/actions/golang/action.yaml | 2 +- .github/actions/install-tools/action.yaml | 2 +- .github/actions/save-logs/action.yaml | 2 +- .github/actions/zarf/action.yaml | 2 +- .github/workflows/commitlint.yaml | 2 +- .github/workflows/release.yaml | 6 +++--- .github/workflows/scan-codeql.yaml | 4 ++-- .github/workflows/scan-lint.yaml | 2 +- .github/workflows/scorecard.yaml | 6 +++--- 9 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/actions/golang/action.yaml b/.github/actions/golang/action.yaml index 772d57e..765db18 100644 --- a/.github/actions/golang/action.yaml +++ b/.github/actions/golang/action.yaml @@ -4,6 +4,6 @@ description: "Setup Go binary and caching" runs: using: composite steps: - - uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0 + - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0 with: go-version: 1.21.x diff --git a/.github/actions/install-tools/action.yaml b/.github/actions/install-tools/action.yaml index 622af58..c57e494 100644 --- a/.github/actions/install-tools/action.yaml +++ b/.github/actions/install-tools/action.yaml @@ -5,4 +5,4 @@ runs: using: composite steps: # used by goreleaser to create SBOMs - - uses: anchore/sbom-action/download-syft@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 + - uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0 diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml index 72cec34..edea051 100644 --- a/.github/actions/save-logs/action.yaml +++ b/.github/actions/save-logs/action.yaml @@ -4,7 +4,7 @@ description: "Save debug logs" runs: using: composite steps: - - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 + - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: debug-log path: /tmp/maru-*.log diff --git a/.github/actions/zarf/action.yaml b/.github/actions/zarf/action.yaml index 4117398..2d49e58 100644 --- a/.github/actions/zarf/action.yaml +++ b/.github/actions/zarf/action.yaml @@ -7,4 +7,4 @@ runs: - uses: defenseunicorns/setup-zarf@main with: # renovate: datasource=github-tags depName=zarf-dev/zarf - version: v0.46.0 + version: v0.49.0 diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml index 755bd88..e0daf45 100644 --- a/.github/workflows/commitlint.yaml +++ b/.github/workflows/commitlint.yaml @@ -21,7 +21,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 + uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 - name: Install commitlint run: npm install --save-dev @commitlint/{config-conventional,cli} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 58ccf17..7b64239 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -24,7 +24,7 @@ jobs: # Upload the contents of the build directory for later stages to use - name: Upload build artifacts - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: build-artifacts path: build/ @@ -106,7 +106,7 @@ jobs: - name: Get Brew tap repo token id: brew-tap-token - uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1.11.1 + uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2 # v1.11.5 with: app-id: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_ID }} private-key: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_SECRET }} @@ -114,7 +114,7 @@ jobs: repositories: homebrew-tap - name: Run GoReleaser - uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6.1.0 + uses: goreleaser/goreleaser-action@90a3faa9d0182683851fbfa97ca1a2cb983bfca3 # v6.2.1 with: distribution: goreleaser version: latest diff --git a/.github/workflows/scan-codeql.yaml b/.github/workflows/scan-codeql.yaml index 935e95d..ea937ad 100644 --- a/.github/workflows/scan-codeql.yaml +++ b/.github/workflows/scan-codeql.yaml @@ -45,7 +45,7 @@ jobs: run: make build-cli-linux-amd - name: Initialize CodeQL - uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 + uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10 env: CODEQL_EXTRACTOR_GO_BUILD_TRACING: on with: @@ -54,6 +54,6 @@ jobs: - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 + uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/scan-lint.yaml b/.github/workflows/scan-lint.yaml index a33fbe7..3713296 100644 --- a/.github/workflows/scan-lint.yaml +++ b/.github/workflows/scan-lint.yaml @@ -26,7 +26,7 @@ jobs: extra_args: --all-files --verbose # pre-commit run --all-files --verbose - name: Run Revive Action by pulling pre-built image - uses: docker://morphy/revive-action:v2@sha256:793c4e8bac339d7dcfccb0c35c9dbc623f5b0956515fcce9efd78162c084e8e0 + uses: docker://morphy/revive-action:v2@sha256:28eca8b53427f9f1b0c8d44236b057be4bf62c9118c98223285c0558192f0257 with: config: revive.toml # Exclude patterns, separated by semicolons (optional) diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 2178365..d6a052a 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -27,7 +27,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 + uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1 with: results_file: results.sarif results_format: sarif @@ -37,7 +37,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: SARIF file path: results.sarif @@ -45,6 +45,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 + uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10 with: sarif_file: results.sarif