Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 14, 2025

This PR contains the following updates:

Package Type Update Change
actions/setup-go action minor v5.3.0 -> v5.5.0
aquasecurity/trivy-action action minor v0.29.0 -> 0.31.0
capsule minor 0.7.4 -> 0.10.0
codecov/codecov-action action patch v5.4.0 -> v5.4.3
goreleaser/goreleaser-action action minor v6.2.1 -> v6.3.0
securego/gosec action patch v2.22.2 -> v2.22.5
sigstore/cosign-installer action minor v3.8.1 -> v3.9.1
sigstore/cosign-installer action minor v3.8.0 -> v3.9.1
slsa-framework/slsa-github-generator action minor v2.0.0 -> v2.1.0
zgosalvez/github-actions-ensure-sha-pinned-actions action patch v3.0.22 -> v3.0.25

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed
Dependency updates :
New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.31.0

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@0.30.0...0.31.0

v0.30.0

Compare Source

What's Changed
New Contributors

Full Changelog: aquasecurity/trivy-action@0.29.0...0.30.0

projectcapsule/capsule (capsule)

v0.10.0

Compare Source

Changelog

✨ New Features
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.9.0...v0.10.0

Docker Images

  • ghcr.io/projectcapsule/capsule:0.10.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.10.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.33 >= 1.33.0

Thanks to all the contributors! 🚀 🦄

v0.9.0

Changelog

✨ New Features
🐛 Bug fixes
🛠 Dependency updates

Full Changelog: projectcapsule/capsule@v0.8.1...v0.9.0

Docker Images

  • ghcr.io/projectcapsule/capsule:0.9.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.9.0

Review the Major Changes section first before upgrading to a new version

[!IMPORTANT]
Kubernetes compatibility

Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.33 >= 1.33.0

Thanks to all the contributors! 🚀 🦄

v0.8.1

Compare Source

v0.8.0

Compare Source

Changelog

This release supports version Kubernetes version 1.33 🎉

✨ New Features
🐛 Bug fixes
📖 Documentation updates

Full Changelog: projectcapsule/capsule@v0.7.4...v0.8.0

Docker Images

  • ghcr.io/projectcapsule/capsule:0.8.0
  • ghcr.io/projectcapsule/capsule:latest

Helm Chart
View this release on Artifact Hub or use the OCI helm chart:

  • ghcr.io/projectcapsule/charts/capsule:0.8.0

Review the Major Changes section first before upgrading to a new version

Kubernetes compatibility

[!IMPORTANT]
Note that the Capsule project offers support only for the latest minor version of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors.

Kubernetes version Minimum required
v1.33 >= 1.33.0

Thanks to all the contributors! 🚀 🦄

codecov/codecov-action (codecov/codecov-action)

v5.4.3

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.3.0

Compare Source

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

securego/gosec (securego/gosec)

v2.22.5

Compare Source

Changelog

  • d2d3ae6 Switch back go.mod to minimum 1.23.0
  • 1e7ed06 Update dependencies
  • 1bef91a Update go version 1.24.4 and 1.23.10 in CI
  • 621702f chore(deps): update all dependencies
  • 017d1d6 G201/G202: add checks for injection into sql.Conn methods
  • 67f63d4 chore(deps): update module google.golang.org/api to v0.235.0
  • b4eabb1 chore(deps): update module google.golang.org/api to v0.234.0
  • 52a80ff chore(deps): update module google.golang.org/api to v0.233.0
  • e2a9506 chore(deps): update module google.golang.org/api to v0.232.0

v2.22.4

Compare Source

Changelog

  • 6decf96 Update to go version 1.24.3 and 1.23.9
  • d522338 update: updated the build command to include version metadata
  • 270b5ce chore(deps): update all dependencies
  • 6027926 Update the AI provider API key value when provided as an argument
  • 65d2d9f chore(deps): update module google.golang.org/api to v0.230.0
  • dc1c38b chore(deps): update module google.golang.org/api to v0.229.0
  • 55dbf5a chore(deps): update all dependencies
  • 2aaa9c4 Comment the reason why the file can be nil when an issue is created
  • 700e9a9 Handle nil file when creating a new issue
  • d514c42 chore(deps): update all dependencies (#​1333)
  • 1d458c5 Update version in 'action.yml' to 2.22.3 (anticipating next version (#​1332)

v2.22.3

Compare Source

Changelog

sigstore/cosign-installer (sigstore/cosign-installer)

v3.9.1

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.9.0

v3.8.2

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)

v2.1.0

Compare Source

v2.1.0: Sigstore Bundles for Generic Generator and Go Builder

The workflows generator_generic_slsa3.yml and builder_go_slsa3.yml
have been updated to produce signed Sigstore Bundles, just like all the other builders
that use the BYOB framework.

The workflow logs will now print a LogIndex, rather than a LogUUID. Both are equally searchanble on
https://search.sigstore.dev/.

v2.1.0: Vars context recorded in provenance
  • Updated: GitHub vars context is now recorded in provenance for the generic and
    container generators. The vars context cannot affect the build in the Go
    builder so it is not recorded.
zgosalvez/github-actions-ensure-sha-pinned-actions (zgosalvez/github-actions-ensure-sha-pinned-actions)

v3.0.25

Compare Source

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.25

v3.0.24

Compare Source

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.24

v3.0.23

Compare Source

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.23


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov
Copy link

codecov bot commented Mar 14, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 48.00%. Comparing base (cf2c6ca) to head (df0e201).

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #28   +/-   ##
=======================================
  Coverage   48.00%   48.00%           
=======================================
  Files           7        7           
  Lines         602      602           
=======================================
  Hits          289      289           
  Misses        283      283           
  Partials       30       30           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot changed the title chore(deps): update aquasecurity/trivy-action action to v0.30.0 chore(deps): update all-ci-dependencies Mar 19, 2025
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch from e0dc2a9 to 53588c0 Compare March 19, 2025 03:29
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 3 times, most recently from 8a0cff3 to ebd7ff4 Compare April 4, 2025 10:21
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from 77a547b to 748269d Compare April 14, 2025 22:01
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch from 748269d to 084b452 Compare April 22, 2025 22:08
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 4 times, most recently from 6a2d7bb to 7d3e822 Compare May 8, 2025 03:24
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from f09c338 to 4f7e468 Compare May 9, 2025 06:03
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 3 times, most recently from 82fec35 to 2c348a7 Compare May 22, 2025 12:28
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch from 2c348a7 to 603e0f6 Compare June 3, 2025 11:21
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch 2 times, most recently from 24f8a9f to 884a3d9 Compare June 17, 2025 17:02
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch from 884a3d9 to df0e201 Compare June 23, 2025 20:30
@renovate renovate bot force-pushed the renovate/all-ci-dependencies branch from df0e201 to c5b0d4f Compare June 26, 2025 12:30
@codecov
Copy link

codecov bot commented Jun 26, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@oliverbaehler oliverbaehler merged commit 3a113e8 into main Jun 26, 2025
15 of 17 checks passed
@renovate renovate bot deleted the renovate/all-ci-dependencies branch June 26, 2025 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants