chore(deps): update all dependencies #6

renovate · 2024-01-11T17:53:11Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v3.3.2` -> `v4.2.0`
actions/checkout	action	minor	`v4.1.1` -> `v4.2.2`
actions/dependency-review-action	action	major	`v3.1.5` -> `v4.5.0`
actions/setup-go	action	minor	`v5.0.0` -> `v5.3.0`
github/codeql-action	action	minor	`v3.23.0` -> `v3.28.9`
step-security/harden-runner	action	minor	`v2.6.1` -> `v2.10.4`

Release Notes

actions/cache (actions/cache)

`v4.2.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4...v4.2.0

What's Changed

Restore original behavior of cache-hit output by @joshmgross in https://github.com/actions/cache/pull/1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

`v4.1.0`

Compare Source

What's Changed

Fix cache-hit output when cache missed by @fchimpan in https://github.com/actions/cache/pull/1404
Deprecate save-always input by @joshmgross in https://github.com/actions/cache/pull/1452

New Contributors

@ottlinger made their first contribution in https://github.com/actions/cache/pull/1437
@Olegt0rr made their first contribution in https://github.com/actions/cache/pull/1377
@fchimpan made their first contribution in https://github.com/actions/cache/pull/1404
@x612skm made their first contribution in https://github.com/actions/cache/pull/1434
@todgru made their first contribution in https://github.com/actions/cache/pull/1311
@Jcambass made their first contribution in https://github.com/actions/cache/pull/1463
@mackey0225 made their first contribution in https://github.com/actions/cache/pull/1462
@quatquatt made their first contribution in https://github.com/actions/cache/pull/1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

`v4.0.2`

Compare Source

`v4.0.1`

Compare Source

What's Changed

Update README.md by @yacaovsnc in https://github.com/actions/cache/pull/1304
Update examples by @yacaovsnc in https://github.com/actions/cache/pull/1305
Update actions/cache publish flow by @bethanyj28 in https://github.com/actions/cache/pull/1340
Update @actions/cache by @bethanyj28 in https://github.com/actions/cache/pull/1341

New Contributors

@yacaovsnc made their first contribution in https://github.com/actions/cache/pull/1304

Full Changelog: actions/cache@v4...v4.0.1

`v4.0.0`

Compare Source

What's Changed

Update action to node20 by @takost in https://github.com/actions/cache/pull/1284
feat: save-always flag by @to-s in https://github.com/actions/cache/pull/1242

New Contributors

@takost made their first contribution in https://github.com/actions/cache/pull/1284
@to-s made their first contribution in https://github.com/actions/cache/pull/1242

Full Changelog: actions/cache@v3...v4.0.0

`v3.4.0`

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

@actions/core: 1.11.1
@actions/io: 1.1.3
@vercel/ncc: 0.38.3

Full Changelog: actions/cache@v3...v3.4.0

`v3.3.3`

Compare Source

What's Changed

Cache v3.3.3 by @robherley in https://github.com/actions/cache/pull/1302

New Contributors

@robherley made their first contribution in https://github.com/actions/cache/pull/1302

Full Changelog: actions/cache@v3...v3.3.3

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/actions/checkout/pull/1739
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/actions/checkout/pull/1697
Check out other refs/* by commit by @orhantoy in https://github.com/actions/checkout/pull/1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in https://github.com/actions/checkout/pull/1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in https://github.com/actions/checkout/pull/1732

`v4.1.5`

Compare Source

What's Changed

Update NPM dependencies by @cory-miller in https://github.com/actions/checkout/pull/1703
Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/actions/checkout/pull/1694
Bump actions/setup-node from 1 to 4 by @dependabot in https://github.com/actions/checkout/pull/1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in https://github.com/actions/checkout/pull/1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in https://github.com/actions/checkout/pull/1692
Add dependabot config by @cory-miller in https://github.com/actions/checkout/pull/1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in https://github.com/actions/checkout/pull/1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in https://github.com/actions/checkout/pull/1643

`v4.1.3`

Compare Source

What's Changed

Update actions/checkout version in update-main-version.yml by @jww3 in https://github.com/actions/checkout/pull/1650
Check git version before attempting to disable sparse-checkout by @jww3 in https://github.com/actions/checkout/pull/1656
Add SSH user parameter by @cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

actions/dependency-review-action (actions/dependency-review-action)

`v4.5.0`

Compare Source

What's Changed

Bump got from 14.4.2 to 14.4.3 by @dependabot in https://github.com/actions/dependency-review-action/pull/844
Bump nodemon from 3.1.0 to 3.1.7 by @dependabot in https://github.com/actions/dependency-review-action/pull/847
Bump @vercel/ncc from 0.38.1 to 0.38.3 by @dependabot in https://github.com/actions/dependency-review-action/pull/849
Overriding the cross-spawn dependency to use a safe version by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/850
fix: add summary comment on failure when warn-only: true by @ebickle in https://github.com/actions/dependency-review-action/pull/827
Prepare for 4.5.0 release by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/851

New Contributors

@ebickle made their first contribution in https://github.com/actions/dependency-review-action/pull/827

Full Changelog: actions/dependency-review-action@v4...v4.5.0

`v4.4.0`

Compare Source

What's Changed

Fix for merge_group event bug by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/846

Full Changelog: actions/dependency-review-action@v4.3.5...v4.4.0

`v4.3.5`

Compare Source

What's Changed

fix: getRefs function to handle merge_group events by @louis-bompart in https://github.com/actions/dependency-review-action/pull/766
Create pull_request_template.md by @jonjanego in https://github.com/actions/dependency-review-action/pull/794
Update CONTRIBUTING.md by @jonjanego in https://github.com/actions/dependency-review-action/pull/793
Bump @types/node from 20.11.28 to 20.16.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/815
Upgrade transitive micromatch library by @elireisman in https://github.com/actions/dependency-review-action/pull/829
Do not list changed dependencies in summary by @hmaurer in https://github.com/actions/dependency-review-action/pull/828
Update stale.yaml by @jonjanego in https://github.com/actions/dependency-review-action/pull/832
Bump got from 14.4.1 to 14.4.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/822
Bump eslint-plugin-jest and ts-jest by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/840

New Contributors

@louis-bompart made their first contribution in https://github.com/actions/dependency-review-action/pull/766
@Ahmed3lmallah made their first contribution in https://github.com/actions/dependency-review-action/pull/840

Full Changelog: actions/dependency-review-action@v4.3.4...v4.3.5

`v4.3.4`

Compare Source

What's Changed

Include all added dependencies in scorecard entries by @elireisman in https://github.com/actions/dependency-review-action/pull/783
Update SPDX Expression Parsing by @febuiles in https://github.com/actions/dependency-review-action/pull/719
- This PR is a significant refactor of SPDX expression parsing that may fix some bugs, but unfortunately there are several related known issues that remain unresolved as of this version.

Full Changelog: actions/dependency-review-action@v4.3.3...v4.3.4

`v4.3.3`: Notes for v4.3.3

Compare Source

What's Changed

Allow slashes in purl package names by @juxtin in https://github.com/actions/dependency-review-action/pull/765
use the v3 version of the deps.dev API by @josieang in https://github.com/actions/dependency-review-action/pull/741
PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README by @am-stead in https://github.com/actions/dependency-review-action/pull/773
fix show-openssf-scorecard-levels input by @ramann in https://github.com/actions/dependency-review-action/pull/776
Updates to the contribution guidelines by @jonjanego in https://github.com/actions/dependency-review-action/pull/778
Create issue templates by @jonjanego in https://github.com/actions/dependency-review-action/pull/777
Fix the max comment length issue by @jhutchings1 and @elireisman in https://github.com/actions/dependency-review-action/pull/767
Bump project version to 4.3.3 in prep for a release by @elireisman in https://github.com/actions/dependency-review-action/pull/781

New Contributors

@josieang made their first contribution in https://github.com/actions/dependency-review-action/pull/741
@am-stead made their first contribution in https://github.com/actions/dependency-review-action/pull/773
@ramann made their first contribution in https://github.com/actions/dependency-review-action/pull/776

Full Changelog: actions/dependency-review-action@v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Fix package-url parsing for allow-dependencies-licenses by @juxtin in https://github.com/actions/dependency-review-action/pull/761

Full Changelog: actions/dependency-review-action@v4.3.1...v4.3.2

`v4.3.1`

Compare Source

What's Changed

This release fixes some bugs related to package-url parsing that were introduced in 4.3.0. See https://github.com/actions/dependency-review-action/pull/753.

Full Changelog: actions/dependency-review-action@V4.3.0...v4.3.1

`v4.3.0`

Compare Source

New Features

The deny-packages option can now be used without a version number to exclude all versions of a package.

What's Changed

Fix action variable name for scorecard by @lukehinds in https://github.com/actions/dependency-review-action/pull/735
Fix extra https:// in summary by @jhutchings1 in https://github.com/actions/dependency-review-action/pull/748
Bump typescript from 5.3.3 to 5.4.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/744
Bump eslint-plugin-github from 4.10.1 to 4.10.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/737
Show denied packages with red X by @juxtin in https://github.com/actions/dependency-review-action/pull/750
deny-packages configuration option can deny specified version or all packages by @febuiles and @bteng22 in https://github.com/actions/dependency-review-action/pull/733

New Contributors

@bteng22 made their first contribution in https://github.com/actions/dependency-review-action/pull/733
@lukehinds made their first contribution in https://github.com/actions/dependency-review-action/pull/735

Full Changelog: actions/dependency-review-action@v4.2.5...V4.3.0

`v4.2.5`: 4.2.5

Compare Source

What's Changed

Fixed a bug where some configuration options in external files were not being properly picked up -- https://github.com/actions/dependency-review-action/pull/722
Bump eslint from 8.56.0 to 8.57.0

Full Changelog: actions/dependency-review-action@v4.2.4...v4.2.5

`v4.2.4`

Compare Source

What's Changed

Fixed a bug in the output of OpenSSF cards for GitHub Actions.

New Contributors

@sporkmonger made their first contribution in https://github.com/actions/dependency-review-action/pull/721

Full Changelog: actions/dependency-review-action@v4.2.3...v4.2.4

`v4.2.3`: 4.2.3

Compare Source

What's Changed

Set comment as output by @jsoref in https://github.com/actions/dependency-review-action/pull/698
Add support for calculating OpenSSF Scorecards by @jhutchings1 in https://github.com/actions/dependency-review-action/pull/709
Add outputs for the changes data by @laughedelic in https://github.com/actions/dependency-review-action/pull/707

New Contributors

@jhutchings1 made their first contribution in https://github.com/actions/dependency-review-action/pull/709
@laughedelic made their first contribution in https://github.com/actions/dependency-review-action/pull/707

Full Changelog: actions/dependency-review-action@v4.1.3...v4.2.3

`v4.1.3`: 4.1.3

Compare Source

Fixes a bug in 4.1.2 that would introduce comments in every pull request, regardless of the user's configuration (see https://github.com/actions/dependency-review-action/issues/697).

Full Changelog: actions/dependency-review-action@v4.1.2...v4.1.3

`v4.1.2`: 4.1.2

Compare Source

What's Changed

Expose dependency comment content by @jsoref in https://github.com/actions/dependency-review-action/pull/696

Full Changelog: actions/dependency-review-action@v4.1.1...v4.1.2

`v4.1.1`: 4.1.1

Compare Source

What's Changed

Bump undici to fix GHSA-wqq4-5wpv-mx2g
Bump @types/node from 20.11.17 to 20.11.19 by @dependabot in https://github.com/actions/dependency-review-action/pull/693

Full Changelog: actions/dependency-review-action@v4.1.0...v4.1.1

`v4.1.0`: 4.1.0

Compare Source

What's Changed

Add warn-only by @tgrall in https://github.com/actions/dependency-review-action/pull/432

Added a new configuration option (warn-only, boolean) that makes the action always succeed while still displaying found vulnerabilities in the log.

Create stale.yaml by @jonjanego in https://github.com/actions/dependency-review-action/pull/671
Use manual codeql config by @juxtin in https://github.com/actions/dependency-review-action/pull/678
Multiple dependency updates (see the changelog below for more information)

New Contributors

@jonjanego made their first contribution in https://github.com/actions/dependency-review-action/pull/671
@tgrall made their first contribution in https://github.com/actions/dependency-review-action/pull/432

Full Changelog: actions/dependency-review-action@v4...v4.1.0

`v4.0.0`

Compare Source

Update action to Node 20 by @takost in https://github.com/actions/dependency-review-action/pull/639
Dependabot updates, see the full changelog for more details.

New Contributors

@takost made their first contribution in https://github.com/actions/dependency-review-action/pull/639

Full Changelog: actions/dependency-review-action@v3.1.5...v4.0.0

actions/setup-go (actions/setup-go)

`v5.3.0`

Compare Source

What's Changed

Use the new cache service: upgrade @actions/cache to ^4.0.0 by @Link- in https://github.com/actions/setup-go/pull/531
Configure Dependabot settings by @HarithaVattikuti in https://github.com/actions/setup-go/pull/530
Document update - permission section by @HarithaVattikuti in https://github.com/actions/setup-go/pull/533
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

@Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

@Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Add workflow file for publishing releases to immutable action package by @Jcambass in https://github.com/actions/setup-go/pull/500
Upgrade IA Publish by @Jcambass in https://github.com/actions/setup-go/pull/502
Add architecture to cache key by @Zxilly in https://github.com/actions/setup-go/pull/493
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Enhance workflows and Upgrade micromatch Dependency by @priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

Revise isGhes logic by @jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

@Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
@Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
@jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
@priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

`v5.0.2`

Compare Source

What's Changed

Bug fixes:

Fix versions check failure by @HarithaVattikuti in https://github.com/actions/setup-go/pull/479

Dependency updates:

Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @dependabot in https://github.com/actions/setup-go/pull/487

New Contributors

@HarithaVattikuti made their first contribution in https://github.com/actions/setup-go/pull/479

Full Changelog: actions/setup-go@v5...v5.0.2

`v5.0.1`

Compare Source

What's Changed

Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @dependabot , @HarithaVattikuti in https://github.com/actions/setup-go/pull/465
Update documentation with latest V5 release notes by @ab in https://github.com/actions/setup-go/pull/459
Update version documentation by @178inaba in https://github.com/actions/setup-go/pull/458
Documentation update of actions/setup-go to v5 by @chenrui333 in https://github.com/actions/setup-go/pull/449

New Contributors

@ab made their first contribution in https://github.com/actions/setup-go/pull/459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

github/codeql-action (github/codeql-action)

`v3.28.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

Update default CodeQL bundle version to 2.20.4. #2753

See the full CHANGELOG.md for more information.

`v3.28.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #2744

See the full CHANGELOG.md for more information.

`v3.28.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #2726

See the full CHANGELOG.md for more information.

`v3.28.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

Update default CodeQL bundle version to 2.20.3. #2717

See the full CHANGELOG.md for more information.

`v3.28.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

Update default CodeQL bundle version to 2.20.2. #2707
Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710
Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

See the full CHANGELOG.md for more information.

`v3.28.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

`v3.28.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

Bump the minimum CodeQL bundle version to 2.15.5. #2655
Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

`v3.27.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.8`

Compare Source

`v3.27.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
Update default CodeQL bundle version to 2.20.0. #2636

See the full CHANGELOG.md for more information.

`v3.27.6`

Compare Source

`v3.27.5`

Compare Source

`v3.27.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.3`

[Compare Source](https://redirect.github.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~chore(deps): update actions/cache action to v3.3.3~~ chore(deps): update all dependencies Jan 17, 2024

renovate bot force-pushed the renovate/all branch 2 times, most recently from 9614eb1 to d1c5125 Compare January 18, 2024 15:25

renovate bot force-pushed the renovate/all branch 2 times, most recently from 582cc92 to 8336bd8 Compare January 31, 2024 01:28

renovate bot force-pushed the renovate/all branch from 8336bd8 to 7366334 Compare February 2, 2024 22:59

renovate bot force-pushed the renovate/all branch 5 times, most recently from 8932b43 to e685eec Compare February 19, 2024 16:39

renovate bot force-pushed the renovate/all branch 3 times, most recently from 0abb88b to 31f842e Compare February 23, 2024 10:13

renovate bot force-pushed the renovate/all branch 2 times, most recently from 6e09e71 to 2ad9486 Compare February 29, 2024 23:07

renovate bot force-pushed the renovate/all branch 3 times, most recently from c098dd1 to 8163be3 Compare March 19, 2024 17:14

renovate bot force-pushed the renovate/all branch 4 times, most recently from 11cb074 to bc6772b Compare March 26, 2024 10:21

renovate bot force-pushed the renovate/all branch from bc6772b to 009e2a1 Compare April 5, 2024 16:21

renovate bot force-pushed the renovate/all branch 3 times, most recently from b006e10 to 0f7c2bb Compare April 22, 2024 14:36

renovate bot force-pushed the renovate/all branch 3 times, most recently from 875bf43 to 0333a42 Compare April 25, 2024 23:30

renovate bot force-pushed the renovate/all branch 3 times, most recently from c4afe54 to 5d84387 Compare October 28, 2024 20:17

renovate bot force-pushed the renovate/all branch 4 times, most recently from b7ba51b to 5876746 Compare November 14, 2024 15:01

renovate bot force-pushed the renovate/all branch 3 times, most recently from d5bdbc9 to ba4e0dc Compare November 21, 2024 02:28

renovate bot force-pushed the renovate/all branch 2 times, most recently from 8e65117 to dfcebd7 Compare December 5, 2024 19:05

renovate bot force-pushed the renovate/all branch 4 times, most recently from 528100e to c7d637a Compare December 13, 2024 01:47

renovate bot force-pushed the renovate/all branch from c7d637a to 45a0b9e Compare December 20, 2024 20:54

renovate bot force-pushed the renovate/all branch 2 times, most recently from 296a20e to 240a5d4 Compare January 10, 2025 21:11

renovate bot force-pushed the renovate/all branch 6 times, most recently from 190c9ff to a9f1669 Compare January 26, 2025 10:08

renovate bot force-pushed the renovate/all branch 3 times, most recently from 56e764b to b953e80 Compare January 29, 2025 20:35

chore(deps): update all dependencies

de61463

renovate bot force-pushed the renovate/all branch from b953e80 to de61463 Compare February 7, 2025 12:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all dependencies #6

chore(deps): update all dependencies #6

renovate bot commented Jan 11, 2024 •

edited

Loading

chore(deps): update all dependencies #6

Are you sure you want to change the base?

chore(deps): update all dependencies #6

Conversation

renovate bot commented Jan 11, 2024 • edited Loading

Release Notes

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

⚠️ Important Changes

Minor changes

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

v4.3.3: Notes for v4.3.3

What's Changed

New Contributors

What's Changed

What's Changed

New Features

What's Changed

New Contributors

v4.2.5: 4.2.5

What's Changed

What's Changed

New Contributors

v4.2.3: 4.2.3

What's Changed

New Contributors

v4.1.3: 4.1.3

v4.1.2: 4.1.2

What's Changed

v4.1.1: 4.1.1

What's Changed

v4.1.0: 4.1.0

What's Changed

New Contributors

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

New Contributors

CodeQL Action Changelog

3.28.9 - 07 Feb 2025

CodeQL Action Changelog

3.28.8 - 29 Jan 2025

CodeQL Action Changelog

3.28.7 - 29 Jan 2025

CodeQL Action Changelog

3.28.6 - 27 Jan 2025

CodeQL Action Changelog

3.28.5 - 24 Jan 2025

CodeQL Action Changelog

3.28.4 - 23 Jan 2025

CodeQL Action Changelog

3.28.3 - 22 Jan 2025

CodeQL Action Changelog

renovate bot commented Jan 11, 2024 •

edited

Loading

`v4.3.3`: Notes for v4.3.3

`v4.2.5`: 4.2.5

`v4.2.3`: 4.2.3

`v4.1.3`: 4.1.3

`v4.1.2`: 4.1.2

`v4.1.1`: 4.1.1

`v4.1.0`: 4.1.0