New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update github actions all dependencies #183

Merged

paulushcgcj merged 1 commit into main from renovate/github-actions-all

Nov 17, 2023

Contributor

renovate bot commented Nov 17, 2023 •

edited by github-actions bot

Loading

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy-action	action	minor	`0.9.2` -> `0.14.0`
bcgov-nr/action-builder-ghcr	action	minor	`v1.1.0` -> `v1.3.0`
bcgov-nr/action-deployer-openshift	action	minor	`v1.0.3` -> `v1.4.0`
bcgov-nr/action-test-and-analyse	action	patch	`v0.0.1` -> `v0.0.2`

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

`v0.14.0`

What's Changed

fix: set return code after each Trivy call by @LiamMacP in https://github.com/aquasecurity/trivy-action/pull/247
Update to trivy version 0.47.0 in Dockerfile by @MPV in https://github.com/aquasecurity/trivy-action/pull/280
feature: add filesystem alias by @kderck in https://github.com/aquasecurity/trivy-action/pull/269

New Contributors

@LiamMacP made their first contribution in https://github.com/aquasecurity/trivy-action/pull/247
@MPV made their first contribution in https://github.com/aquasecurity/trivy-action/pull/280
@kderck made their first contribution in https://github.com/aquasecurity/trivy-action/pull/269

Full Changelog: aquasecurity/trivy-action@0.13.1...0.14.0

`v0.13.1`

What's Changed

Update Dockerfile to 0.46.1 by @witoldsleczkowski in https://github.com/aquasecurity/trivy-action/pull/277

New Contributors

@witoldsleczkowski made their first contribution in https://github.com/aquasecurity/trivy-action/pull/277

Full Changelog: aquasecurity/trivy-action@0.13.0...0.13.1

`v0.13.0`

What's Changed

fix: mark image-ref attribute optional by @arxeiss in https://github.com/aquasecurity/trivy-action/pull/261
Update Dockerfile to 0.46.0 by @Cr0n1c in https://github.com/aquasecurity/trivy-action/pull/274

New Contributors

@arxeiss made their first contribution in https://github.com/aquasecurity/trivy-action/pull/261
@Cr0n1c made their first contribution in https://github.com/aquasecurity/trivy-action/pull/274

Full Changelog: aquasecurity/trivy-action@0.12.0...0.13.0

`v0.12.0`

What's Changed

chore(deps): Update trivy to v0.43.1 by @simar7 in https://github.com/aquasecurity/trivy-action/pull/243
ci: add workflow to bump trivy by @nikpivkin in https://github.com/aquasecurity/trivy-action/pull/245
Update README.md to change the example to the new default brach name … by @jdsmithit in https://github.com/aquasecurity/trivy-action/pull/234
feat(trivy): Bump to v0.45.0 by @simar7 in https://github.com/aquasecurity/trivy-action/pull/256

New Contributors

@nikpivkin made their first contribution in https://github.com/aquasecurity/trivy-action/pull/245
@jdsmithit made their first contribution in https://github.com/aquasecurity/trivy-action/pull/234

Full Changelog: aquasecurity/trivy-action@0.11.2...0.12.0

`v0.11.2`

Full Changelog: aquasecurity/trivy-action@0.11.1...0.11.2

`v0.11.1`

What's Changed

bump trivy to v0.42.1 by @danielchabr in https://github.com/aquasecurity/trivy-action/pull/240

Full Changelog: aquasecurity/trivy-action@0.11.0...0.11.1

`v0.11.0`

What's Changed

Include args when using trivy config file by @hermanwh in https://github.com/aquasecurity/trivy-action/pull/231
bump trivy to v0.42.0 by @danielchabr in https://github.com/aquasecurity/trivy-action/pull/237
Enhance GitHub Dependency Snapshot upload by @abriko in https://github.com/aquasecurity/trivy-action/pull/233
feat: add exit-code parameter to sarif format by @rogercoll in https://github.com/aquasecurity/trivy-action/pull/213

New Contributors

@hermanwh made their first contribution in https://github.com/aquasecurity/trivy-action/pull/231
@danielchabr made their first contribution in https://github.com/aquasecurity/trivy-action/pull/237
@abriko made their first contribution in https://github.com/aquasecurity/trivy-action/pull/233
@rogercoll made their first contribution in https://github.com/aquasecurity/trivy-action/pull/213

Full Changelog: aquasecurity/trivy-action@0.10.0...0.11.0

`v0.10.0`

What's Changed

docs: improve SBOM documentation by @saerosV in https://github.com/aquasecurity/trivy-action/pull/208
chore: Update Trivy to 0.40.0 by @PerfectSlayer in https://github.com/aquasecurity/trivy-action/pull/223

New Contributors

@saerosV made their first contribution in https://github.com/aquasecurity/trivy-action/pull/208
@PerfectSlayer made their first contribution in https://github.com/aquasecurity/trivy-action/pull/223

Full Changelog: aquasecurity/trivy-action@0.9.2...0.10.0

bcgov-nr/action-builder-ghcr (bcgov-nr/action-builder-ghcr)

`v1.3.0`

New Features

keep_versions deletes older GHCR containers, keeping the specified number
keep_regex automatically keeps test and prod tags, but can be overridden
build_file can be omitted if in the build_context folder
token can be omitted if using the default github.token

What's Changed

feat: make token optional, allow inherit by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/31
fix: pr close by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/32
feat: ghcr cleanup w/ keep_versions and keep_regex by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/33
feat: parameters, cleanup and codeowners by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/34

Full Changelog: bcgov-nr/action-builder-ghcr@v1.2.1...v1.3.0

`v1.2.1`

What's Changed

Configure Renovate by @bcgov-devops in https://github.com/bcgov-nr/action-builder-ghcr/pull/23
build(deps): bump actions/checkout from 3 to 4 by @dependabot in https://github.com/bcgov-nr/action-builder-ghcr/pull/25
build(deps): bump docker/build-push-action from 4 to 5 by @dependabot in https://github.com/bcgov-nr/action-builder-ghcr/pull/27
build(deps): bump docker/login-action from 2 to 3 by @dependabot in https://github.com/bcgov-nr/action-builder-ghcr/pull/26
build(deps): bump docker/setup-buildx-action from 2 to 3 by @dependabot in https://github.com/bcgov-nr/action-builder-ghcr/pull/28
bug: disable buildx provenance by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/29
ci: disable Dependabot, using Renovate by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/30

New Contributors

@bcgov-devops made their first contribution in https://github.com/bcgov-nr/action-builder-ghcr/pull/23

Full Changelog: bcgov-nr/action-builder-ghcr@v1.2.0...v1.2.1

`v1.2.0`

What's Changed

feat: adding build args optional parameter by @paulushcgcj in https://github.com/bcgov-nr/action-builder-ghcr/pull/22

Full Changelog: bcgov-nr/action-builder-ghcr@v1.1.2...v1.2.0

`v1.1.2`

What's Changed

feat: better handling of fallback not existing by @pauldaustin in https://github.com/bcgov-nr/action-builder-ghcr/pull/19
feat: tag_fallback error grepping and flatten conditionals by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/21

New Contributors

@pauldaustin made their first contribution in https://github.com/bcgov-nr/action-builder-ghcr/pull/19

Full Changelog: bcgov-nr/action-builder-ghcr@v1.1.1...v1.1.2

`v1.1.1`

What's Changed

Bug fix for perfectly good tag_fallbacks being rejected:

Use docker buildx imagetools to check tag_fallback by @DerekRoberts in https://github.com/bcgov-nr/action-builder-ghcr/pull/18

Full Changelog: bcgov-nr/action-builder-ghcr@v1.1.0...v1.1.1

bcgov-nr/action-deployer-openshift (bcgov-nr/action-deployer-openshift)

`v1.4.0`

Breaking Changes

timeout parameter, if left unset, will cause deployments to stop/fail after 15 minutes

New Features

timeout parameter to prevent deployments from running indefinitely
penetration_test_artifact to prevent artifact collisions
token passing to avoid issue duplication, inherited from calling workflow
penetration_test_token param to override inherited token

What's Changed

Explain issue commenting for penetration_test_issue by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/40
Bump zaproxy/action-full-scan from 0.6.0 to 0.7.0 by @dependabot in https://github.com/bcgov-nr/action-deployer-openshift/pull/41
Configure Renovate by @bcgov-devops in https://github.com/bcgov-nr/action-deployer-openshift/pull/42
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/bcgov-nr/action-deployer-openshift/pull/44
feat: timeout, parameter by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/45
ci: disable Dependabot in favour of Renovate by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/46
Codeowners by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/47
feat: token param by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/48
feat: param for artifact names, avoid collisions by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/49
docs: penetration_test_artifact by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/50

New Contributors

@bcgov-devops made their first contribution in https://github.com/bcgov-nr/action-deployer-openshift/pull/42

Full Changelog: bcgov-nr/action-deployer-openshift@v1.3.0...v1.4.0

`v1.3.0`

What's Changed

feat: allow zap to create issues by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/39

Full Changelog: bcgov-nr/action-deployer-openshift@v1.2.1...v1.3.0

`v1.2.1`

What's Changed

Bump zaproxy/action-full-scan from 0.5.1 to 0.6.0 by @dependabot in https://github.com/bcgov-nr/action-deployer-openshift/pull/37

Full Changelog: bcgov-nr/action-deployer-openshift@v1.2.0...v1.2.1

`v1.2.0`

What's Changed

Update to ZAProxy scan to address GitHub actions deprecating Node 12.

Bump zaproxy/action-full-scan from 0.4.0 to 0.5.1 by @dependabot in https://github.com/bcgov-nr/action-deployer-openshift/pull/36

Full Changelog: bcgov-nr/action-deployer-openshift@v1.1.0...v1.2.0

`v1.1.1`

What's Changed

feat: deployment triggers by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/31
feat: omit trigger to always deploy by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/32
bug: drop quotes around inputs.triggers by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/34

Full Changelog: bcgov-nr/action-deployer-openshift@v1.0.5...v1.1.1

`v1.1.0`

What's Changed

feat: deployment triggers by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/31
feat: omit trigger to always deploy by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/32
drop quotes around inputs.triggers by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/34

Full Changelog: bcgov-nr/action-deployer-openshift@v1.0.5...v1.1.0

`v1.0.5`

What's Changed

Bug: multiple image stream handling by @barrfalk in https://github.com/bcgov-nr/action-deployer-openshift/pull/28
Chore: update image repo by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/29
Bug: renamed envar to prevent collision by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/30

New Contributors

@barrfalk made their first contribution in https://github.com/bcgov-nr/action-deployer-openshift/pull/28

Full Changelog: bcgov-nr/action-deployer-openshift@v1.0.4...v1.0.5

`v1.0.4`

What's Changed

Support multiple imageStreams by @DerekRoberts in https://github.com/bcgov-nr/action-deployer-openshift/pull/26

Full Changelog: bcgov-nr/action-deployer-openshift@v1.0.3...v1.0.4

bcgov-nr/action-test-and-analyse (bcgov-nr/action-test-and-analyse)

`v0.0.2`

What's Changed

Dependabot for updating actions by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/6
Readme by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/7
No acknowledgement by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/8
Bump SonarSource/sonarcloud-github-action from 1.7 to 1.8 by @dependabot in https://github.com/bcgov-nr/action-test-and-analyse/pull/9
SonarCloud adjustments by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/10
Workflows use ubuntu-22.04 instead of ubuntu-latest by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/13
GHA deprecated set-output by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/15
Bug: test stopped, add postgres service by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/24
Bump SonarSource/sonarcloud-github-action from 1.8 to 2.0 by @DerekRoberts in https://github.com/bcgov-nr/action-test-and-analyse/pull/23

Full Changelog: bcgov-nr/action-test-and-analyse@v0.0.1...v0.0.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Thanks for the PR!

Any successful deployments (not always required) will be available below.
Backend available

Once merged, code will be promoted and handed off to following workflow run.
Main Merge Workflow


          chore(deps): update github actions all dependencies

abb500c

renovate bot requested review from paulushcgcj and DerekRoberts as code owners

November 17, 2023 00:39

sonarqubecloud bot commented Nov 17, 2023

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

github-actions bot added the ignore-for-release label

renovate bot temporarily deployed to dev

November 17, 2023 00:40

Inactive

github-actions bot commented Nov 17, 2023

Current changelog

Bug Fixes

adding baseline on migrate (f1db5f1)
be: (#160) (bffe0bb)
changing to flyway and fixing script (436d14f)
deps: update dependency axios to v1.6.0 [security] (#182) (3a09d9c)
deps: update dependency axios-oauth-client to v2 (#151) (ee677a4)
deps: update dependency rimraf to v5 (#152) (86910b5)
deps: update dependency swagger-ui-express to v5 (#164) (24158c5)
deps: update nest monorepo to v10 (#176) (a863123)
deps: update nest monorepo to v10 (major) (#153) (1295623)
deps: update nestjs (#154) (3c64a3a)
fixing database deploy (942d331)
fixing deployment init (ce00b42)
fixing health path (71a133f)
fixing param name (c564ec8)
fixing pr close (6aa607a)
fixing pr workflow (2cf5b9e)
fixing prod deployment environment (df3554d)
fixing test workflow dir (9f8638b)
sec: fixing trivy related issues (1bed6ac)

Features

adding health check (#145) (be07327)
be: (#143) (a6b0de5)
health check cron check (#147) (5fc8b20)
updating merge main (c0280ad)
updating workflow (7d8424d)

renovate bot temporarily deployed to dev

November 17, 2023 00:41

Inactive

paulushcgcj approved these changes

View reviewed changes

paulushcgcj merged commit 19dd53b into main

10 checks passed

paulushcgcj deleted the renovate/github-actions-all branch

November 17, 2023 00:44

paulushcgcj temporarily deployed to dev

November 17, 2023 00:44

— with

GitHub Actions Inactive

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ignore-for-release