chore(deps): Update dependencies for github #2090

renovate-bot · 2024-12-03T13:19:36Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	minor	`v5.0.0` -> `v5.1.0`
github/codeql-action	action	minor	`v4.30.7` -> `v4.31.7`
graalvm/setup-graalvm	action	minor	`v1.2.6` -> `v1.4.4`
ossf/scorecard-action	action	patch	`v2.4.0` -> `v2.4.3`

Release Notes

actions/setup-java (actions/setup-java)

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

github/codeql-action (github/codeql-action)

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v4.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v4.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v4.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205
Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

`v4.30.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

graalvm/setup-graalvm (graalvm/setup-graalvm)

`v1.4.4`

Compare Source

What's Changed

Bump actions/checkout from 5.0.0 to 6.0.0 in the github-actions-updates group by @dependabot[bot] in #198
Bump the npm-updates group with 10 updates by @dependabot[bot] in #197

Full Changelog: graalvm/setup-graalvm@v1.4.3...v1.4.4

`v1.4.3`

Compare Source

What's Changed

Bump the github-actions-updates group with 2 updates by @dependabot[bot] in #192
Bump the npm-updates group with 16 updates by @dependabot[bot] in #191
Support new GraalVM dev artifact names. by @ansalond in #196
Bump js-yaml by @dependabot[bot] in #194
Fix extraction issue on self-hosted Windows runners. by @fniephaus in #195

New Contributors

@ansalond made their first contribution in #196

Full Changelog: graalvm/setup-graalvm@v1.4.2...v1.4.3

`v1.4.2`

Compare Source

What's Changed

Upgrade musl-toolchain to 1.2.5-oracle-00001. by @fniephaus in #189

Full Changelog: graalvm/setup-graalvm@v1.4.1...v1.4.2

`v1.4.1`

Compare Source

`v1.4.0`

Compare Source

What's Changed

Convert to ESM. by @fniephaus in #184

Full Changelog: graalvm/setup-graalvm@v1.3.7...v1.4.0

`v1.3.7`

Compare Source

What's Changed

Bump actions/checkout from 4 to 5 by @dependabot[bot] in #179
Bump the npm-development group across 1 directory with 9 updates by @dependabot[bot] in #180
Revise dependabot.yml and pin GitHub Actions. by @fniephaus in #181
Test against GraalVM 25 and update README.md. by @fniephaus in #183

Full Changelog: graalvm/setup-graalvm@v1...v1.3.7

`v1.3.6`

Compare Source

What's Changed

Bump the npm-development group with 6 updates by @dependabot[bot] in #174
Bump jest and @types/jest by @dependabot[bot] in #175
Bump @actions/cache from 4.0.3 to 4.0.5 in the npm-production group by @dependabot[bot] in #178

Full Changelog: graalvm/setup-graalvm@v1.3.5...v1.3.6

`v1.3.5`

Compare Source

What's Changed

Update dependencies by @fniephaus in #167
Revise README.md. by @fniephaus in #169
Bump the npm-development group with 10 updates by @dependabot[bot] in #170
Bump eslint-plugin-jest from 28.12.0 to 29.0.1 by @dependabot[bot] in #171
Bump form-data from 2.5.3 to 2.5.5 by @dependabot[bot] in #172
Bump version to 1.3.5. by @fniephaus in #173

Full Changelog: graalvm/setup-graalvm@v1.3.4...v1.3.5

`v1.3.4`

Compare Source

What's Changed

Add about arm runners by @alina-yur in #153
Test against GraalVM for JDK 24 and 25 EA builds. by @fniephaus in #155
Bump the npm-development group with 11 updates by @dependabot in #156
Bump the npm-production group with 2 updates by @dependabot in #157
Bump the npm-development group with 11 updates by @dependabot in #160
Bump @octokit/types from 13.10.0 to 14.0.0 by @dependabot in #161
Bump @octokit/types from 14.0.0 to 14.1.0 by @dependabot in #165
Bump the npm-development group with 11 updates by @dependabot in #163
Bump undici from 5.28.5 to 5.29.0 by @dependabot in #162

New Contributors

@alina-yur made their first contribution in #153

Full Changelog: graalvm/setup-graalvm@v1...v1.3.4

`v1.3.3`

Compare Source

What's Changed

SBOM: Ensure 'java-version' is persisted to post-run phase by @rudsberg in #151

Full Changelog: graalvm/setup-graalvm@v1.3.2...v1.3.3

`v1.3.2`

Compare Source

What's Changed

Bump @octokit/request-error from 5.1.0 to 5.1.1 by @dependabot in #140
Bump @octokit/endpoint from 9.0.5 to 9.0.6 by @dependabot in #141
Bump @octokit/request from 8.4.0 to 8.4.1 by @dependabot in #142
Bump @octokit/plugin-paginate-rest from 9.2.1 to 9.2.2 by @dependabot in #148
Bump the npm-development group across 1 directory with 10 updates by @dependabot in #149

Full Changelog: graalvm/setup-graalvm@v1.3.1...v1.3.2

`v1.3.1`

Compare Source

What's Changed

Bump the npm-development group with 5 updates by @dependabot in #135
Bump eslint-config-prettier from 9.1.0 to 10.0.1 by @dependabot in #131
Bump @octokit/types from 12.6.0 to 13.8.0 by @dependabot in #132
Bump semver from 7.6.3 to 7.7.1 by @dependabot in #136
Convert back to CJS and use ncc. by @fniephaus in #139

Full Changelog: graalvm/setup-graalvm@v1.3.0...v1.3.1

`v1.3.0`

Compare Source

What's Changed

Start testing on ubuntu-22.04-arm. by @fniephaus in #127
Bump the npm-development group with 5 updates by @dependabot in #128
Convert to ESM and use rollup. by @fniephaus in #134

Full Changelog: graalvm/setup-graalvm@v1.2.8...v1.3.0

`v1.2.8`

Compare Source

What's Changed

Update @actions/cache and other dependencies. by @fniephaus in #121
Integrate Native Image SBOM with GitHub's Dependency Submission API by @rudsberg in #119
Add dependabot.yml. by @fniephaus in #122
Bump actions/upload-artifact from 3 to 4 by @dependabot in #123
Bump the npm-development group with 5 updates by @dependabot in #124

New Contributors

@rudsberg made their first contribution in #119

Full Changelog: graalvm/setup-graalvm@v1.2.6...v1.2.8

`v1.2.7`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.3`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

docs: clarify GITHUB_TOKEN permissions needed for private repos by @pankajtaneja5 in #1574
📖 Fix recommended command to test the image in development by @deivid-rodriguez in #1583

Other

add missing top-level token permissions to workflows by @timothyklee in #1566
setup codeowners for requesting reviews by @spencerschrock in #1576
🌱 Improve printing options by @deivid-rodriguez in #1584

New Contributors

@timothyklee made their first contribution in #1566
@pankajtaneja5 made their first contribution in #1574
@deivid-rodriguez made their first contribution in #1584

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3

`v2.4.2`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.1.1 release. For a complete list of changes, please refer to the v5.1.0 and v5.1.1 release notes.
Publishing results now uses half the API quota as before. The exact savings depends on the repository in question.
- use Scorecard library entrypoint instead of Cobra hooking by @spencerschrock in #1423
Some errors were made into annotations to make them more visible
- Make default branch error more prominent by @jsoref in #1459
There is now an optional file_mode input which controls how repository files are fetched from GitHub. The default is archive, but git produces the most accurate results for repositories with .gitattributes files at the cost of analysis speed.
- add input for specifying --file-mode by @spencerschrock in #1509
The underlying container for the action is now hosted on GitHub Container Registry. There should be no functional changes.
- 🌱 publish docker images to GitHub Container Registry by @spencerschrock in #1453

Docs

Installation docs update by @JeremiahAHoward in #1416

New Contributors

@JeremiahAHoward made their first contribution in #1416
@jsoref made their first contribution in #1459
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

dpebot · 2025-10-29T20:41:11Z

/gcbrun

dpebot · 2025-10-29T20:54:45Z

/gcbrun

dpebot · 2025-10-30T14:49:14Z

/gcbrun

dpebot · 2025-11-05T15:48:17Z

/gcbrun

dpebot · 2025-11-14T03:35:28Z

/gcbrun

dpebot · 2025-11-18T04:12:58Z

/gcbrun

dpebot · 2025-11-19T01:47:47Z

/gcbrun

dpebot · 2025-11-24T11:35:15Z

/gcbrun

dpebot · 2025-11-26T10:58:17Z

/gcbrun

dpebot · 2025-12-01T11:44:08Z

/gcbrun

dpebot · 2025-12-02T00:06:26Z

/gcbrun

dpebot · 2025-12-02T11:38:12Z

/gcbrun

dpebot · 2025-12-04T05:31:24Z

/gcbrun

dpebot · 2025-12-04T18:21:15Z

/gcbrun

dpebot · 2025-12-05T18:57:29Z

/gcbrun

renovate-bot requested a review from a team as a code owner December 3, 2024 13:19

blunderbuss-gcf bot assigned jackwotherspoon Dec 3, 2024

renovate-bot changed the title ~~chore(deps): Update github/codeql-action action to v3.27.6~~ chore(deps): Update github/codeql-action action to v3.27.7 Dec 10, 2024

renovate-bot force-pushed the renovate/dependencies-for-github branch 5 times, most recently from 8c2986e to 0a72144 Compare December 12, 2024 22:42

renovate-bot changed the title ~~chore(deps): Update github/codeql-action action to v3.27.7~~ chore(deps): Update github/codeql-action action to v3.27.8 Dec 12, 2024

renovate-bot force-pushed the renovate/dependencies-for-github branch from 0a72144 to f3e4e20 Compare December 13, 2024 01:44

renovate-bot changed the title ~~chore(deps): Update github/codeql-action action to v3.27.8~~ chore(deps): Update github/codeql-action action to v3.27.9 Dec 13, 2024

renovate-bot changed the title ~~chore(deps): Update github/codeql-action action to v3.27.9~~ chore(deps): Update dependencies for github Dec 17, 2024

renovate-bot force-pushed the renovate/dependencies-for-github branch 3 times, most recently from 25b2a4f to 1595102 Compare December 20, 2024 22:31

renovate-bot force-pushed the renovate/dependencies-for-github branch 7 times, most recently from 3ca1987 to 4ea6dbb Compare January 16, 2025 18:57

renovate-bot force-pushed the renovate/dependencies-for-github branch 8 times, most recently from e919824 to 817b2f1 Compare January 23, 2025 19:31

renovate-bot force-pushed the renovate/dependencies-for-github branch from 8b0bf69 to e36f4c5 Compare October 29, 2025 20:54

renovate-bot force-pushed the renovate/dependencies-for-github branch from e36f4c5 to 153b492 Compare October 30, 2025 14:49

renovate-bot force-pushed the renovate/dependencies-for-github branch from 153b492 to f42b81a Compare November 5, 2025 15:48

renovate-bot force-pushed the renovate/dependencies-for-github branch from f42b81a to 3fd6836 Compare November 14, 2025 03:35

renovate-bot force-pushed the renovate/dependencies-for-github branch from 3fd6836 to 244a914 Compare November 18, 2025 04:12

renovate-bot force-pushed the renovate/dependencies-for-github branch from 244a914 to 769c28b Compare November 19, 2025 01:47

renovate-bot force-pushed the renovate/dependencies-for-github branch from 769c28b to 0523471 Compare November 24, 2025 11:35

renovate-bot force-pushed the renovate/dependencies-for-github branch from 0523471 to bfaa881 Compare November 26, 2025 10:58

renovate-bot force-pushed the renovate/dependencies-for-github branch from bfaa881 to 062c689 Compare December 1, 2025 11:43

renovate-bot force-pushed the renovate/dependencies-for-github branch from 062c689 to c61a2c7 Compare December 2, 2025 00:06

renovate-bot force-pushed the renovate/dependencies-for-github branch from c61a2c7 to 3f99204 Compare December 2, 2025 11:38

renovate-bot force-pushed the renovate/dependencies-for-github branch from 3f99204 to 2e86802 Compare December 4, 2025 05:31

renovate-bot force-pushed the renovate/dependencies-for-github branch from 2e86802 to 36b9af7 Compare December 4, 2025 18:21

chore(deps): Update dependencies for github

68598a9

renovate-bot force-pushed the renovate/dependencies-for-github branch from 36b9af7 to 68598a9 Compare December 5, 2025 18:57

chore(deps): Update dependencies for github #2090

Are you sure you want to change the base?

chore(deps): Update dependencies for github #2090

Uh oh!

Conversation

renovate-bot commented Dec 3, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

CodeQL Action Changelog

4.30.9 - 17 Oct 2025

CodeQL Action Changelog

4.30.8 - 10 Oct 2025

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

Documentation

Other

New Contributors

What's Changed

What's Changed

Docs

New Contributors

Configuration

Uh oh!

dpebot commented Oct 29, 2025

Uh oh!

dpebot commented Oct 29, 2025

Uh oh!

dpebot commented Oct 30, 2025

Uh oh!

dpebot commented Nov 5, 2025

Uh oh!

dpebot commented Nov 14, 2025

Uh oh!

dpebot commented Nov 18, 2025

Uh oh!

dpebot commented Nov 19, 2025

Uh oh!

dpebot commented Nov 24, 2025

Uh oh!

dpebot commented Nov 26, 2025

Uh oh!

dpebot commented Dec 1, 2025

Uh oh!

dpebot commented Dec 2, 2025

Uh oh!

dpebot commented Dec 2, 2025

Uh oh!

dpebot commented Dec 4, 2025

Uh oh!

renovate-bot commented Dec 3, 2024 •

edited

Loading