Skip to content

Commit c020d1a

Browse files
renovate[bot]renovate[bot]
authored
fix(deps): update all non-major dependencies
1 parent 37aa79d commit c020d1a

37 files changed

+1656
-3545
lines changed

‎.github/actions/golang/action.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: "Setup Go binary and caching"
44
runs:
55
using: composite
66
steps:
7-
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
7+
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
88
with:
99
go-version-file: 'go.mod'
1010
cache: true

‎.github/actions/install-tools/action.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,15 @@ description: "Install pipeline tools"
44
runs:
55
using: composite
66
steps:
7-
- uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0
7+
- uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
88

9-
- uses: anchore/sbom-action/download-syft@b6a39da80722a2cb0ef5d197531764a89b5d48c3 # v0.15.8
9+
- uses: anchore/sbom-action/download-syft@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0.17.0
1010

1111
- name: install grype
1212
env:
1313
# renovate: datasource=github-tags depName=anchore/grype versioning=semver
14-
VERSION: v0.74.6
14+
VERSION: v0.79.3
1515
run: "curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin $VERSION"
1616
shell: bash
1717

18-
- uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
18+
- uses: docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4 # v3.4.0

‎.github/actions/save-logs/action.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ runs:
1515
sudo chown $USER /tmp/zarf-*.log || echo ""
1616
shell: bash
1717

18-
- uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
18+
- uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
1919
with:
2020
name: debug-log${{ inputs.suffix }}
2121
path: /tmp/zarf-*.log

‎.github/actions/slack/action.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ inputs:
99
runs:
1010
using: composite
1111
steps:
12-
- uses: slackapi/slack-github-action@6c661ce58804a1a20f6dc5fbee7f0381b469e001 # v1.25.0
12+
- uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
1313
with:
1414
payload: |
1515
{

‎.github/workflows/build-rust-injector.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: "Checkout Repo"
18-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
18+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1919

2020
- name: Install tools
2121
uses: ./.github/actions/install-tools
@@ -33,7 +33,7 @@ jobs:
3333
shasum zarf-injector-arm64 >> checksums.txt
3434
3535
- name: Auth with AWS
36-
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
36+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
3737
with:
3838
role-to-assume: ${{ secrets.AWS_WRITE_ROLE }}
3939
role-session-name: ${{ github.job || github.event.client_payload.pull_request.head.sha || github.sha }}

‎.github/workflows/commitlint.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,12 @@ jobs:
1616

1717
steps:
1818
- name: Checkout
19-
uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
19+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2020
with:
2121
fetch-depth: 0
2222

2323
- name: Setup Node.js
24-
uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
24+
uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
2525

2626
- name: Install commitlint
2727
run: npm install --save-dev @commitlint/{config-conventional,cli}

‎.github/workflows/compare-cves.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Checkout repo
25-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
25+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2626
with:
2727
ref: ${{ github.head_ref || github.ref_name }}
2828

‎.github/workflows/dependency-review.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,6 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Checkout
13-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
13+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1414
- name: Dependency Review
15-
uses: actions/dependency-review-action@9129d7d40b8c12c1ed0f60400d00c92d437adcce # v4.1.3
15+
uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4

‎.github/workflows/nightly-ecr.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
23+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2424

2525
- name: Setup golang
2626
uses: ./.github/actions/golang
@@ -29,7 +29,7 @@ jobs:
2929
run: make build-cli-linux-amd
3030

3131
- name: Configure AWS Credentials
32-
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
32+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
3333
with:
3434
role-to-assume: ${{ secrets.AWS_NIGHTLY_ROLE }}
3535
aws-region: us-east-1

‎.github/workflows/nightly-eks.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
31+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
3232

3333
- name: Setup golang
3434
uses: ./.github/actions/golang
@@ -37,7 +37,7 @@ jobs:
3737
uses: ./.github/actions/packages
3838

3939
- name: Configure AWS Credentials
40-
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
40+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
4141
with:
4242
role-to-assume: ${{ secrets.AWS_NIGHTLY_ROLE }}
4343
aws-region: us-east-1

‎.github/workflows/publish-application-packages.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,15 @@ jobs:
1818
packages: write
1919
steps:
2020
- name: "Checkout Repo"
21-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
ref: ${{ github.event.inputs.branchName }}
2424

2525
- name: Install The Latest Release Version of Zarf
2626
uses: defenseunicorns/setup-zarf@f95763914e20e493bb5d45d63e30e17138f981d6 # v1.0.0
2727

2828
- name: "Login to GHCR"
29-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
29+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
3030
with:
3131
registry: ghcr.io
3232
username: dummy

‎.github/workflows/release.yml

+10-10
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
steps:
1717
# Checkout the repo and setup the tooling for this job
1818
- name: Checkout
19-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
19+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2020
with:
2121
fetch-depth: 0
2222

@@ -32,7 +32,7 @@ jobs:
3232
make build-cli-linux-arm
3333
3434
- name: "Zarf Agent: Login to GHCR"
35-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
35+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
3636
with:
3737
registry: ghcr.io
3838
username: dummy
@@ -72,7 +72,7 @@ jobs:
7272

7373
# Upload the contents of the build directory for later stages to use
7474
- name: Upload build artifacts
75-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
75+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7676
with:
7777
name: build-artifacts
7878
path: build/
@@ -84,12 +84,12 @@ jobs:
8484
steps:
8585
# Checkout the repo and setup the tooling for this job
8686
- name: Checkout
87-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
87+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
8888
with:
8989
fetch-depth: 0
9090

9191
- name: Download build artifacts
92-
uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
92+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
9393
with:
9494
name: build-artifacts
9595
path: build/
@@ -123,7 +123,7 @@ jobs:
123123
steps:
124124
# Checkout the repo and setup the tooling for this job
125125
- name: Checkout
126-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
126+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
127127
with:
128128
fetch-depth: 0
129129

@@ -134,14 +134,14 @@ jobs:
134134
uses: ./.github/actions/install-tools
135135

136136
- name: Download build artifacts
137-
uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
137+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
138138
with:
139139
name: build-artifacts
140140
path: build/
141141

142142
# Set up AWS credentials for GoReleaser to upload backups of artifacts to S3
143143
- name: Set AWS Credentials
144-
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
144+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
145145
with:
146146
aws-access-key-id: ${{ secrets.AWS_GOV_ACCESS_KEY_ID }}
147147
aws-secret-access-key: ${{ secrets.AWS_GOV_SECRET_ACCESS_KEY }}
@@ -175,7 +175,7 @@ jobs:
175175
176176
- name: Get Brew tap repo token
177177
id: brew-tap-token
178-
uses: actions/create-github-app-token@f2acddfb5195534d487896a656232b016a682f3c # v1.9.0
178+
uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1.10.3
179179
with:
180180
app-id: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_ID }}
181181
private-key: ${{ secrets.HOMEBREW_TAP_WORKFLOW_GITHUB_APP_SECRET }}
@@ -194,7 +194,7 @@ jobs:
194194
HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.brew-tap-token.outputs.token }}
195195

196196
- name: Save CVE report
197-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
197+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
198198
with:
199199
name: cve-report
200200
path: build/zarf-known-cves.csv

‎.github/workflows/scan-codeql.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -46,14 +46,14 @@ jobs:
4646

4747
steps:
4848
- name: Checkout
49-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
49+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
5050

5151
- name: Setup golang
5252
uses: ./.github/actions/golang
5353

5454
# Initializes the CodeQL tools for scanning.
5555
- name: Initialize CodeQL
56-
uses: github/codeql-action/init@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
56+
uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
5757
with:
5858
languages: ${{ matrix.language }}
5959
config-file: ./.github/codeql.yaml
@@ -62,6 +62,6 @@ jobs:
6262
run: make build-cli-linux-amd
6363

6464
- name: Perform CodeQL Analysis
65-
uses: github/codeql-action/analyze@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
65+
uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
6666
with:
6767
category: "/language:${{matrix.language}}"

‎.github/workflows/scan-cves.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
runs-on: ubuntu-latest
1313
steps:
1414
- name: Checkout
15-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
15+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1616

1717
- name: Setup golang
1818
uses: ./.github/actions/golang

‎.github/workflows/scan-docs-and-schema.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: Checkout
14-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
14+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1515

1616
- name: Setup golang
1717
uses: ./.github/actions/golang

‎.github/workflows/scan-lint.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,6 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: Checkout
14-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
14+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
1515
- name: Run golangci-lint
1616
uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # v6.0.1

‎.github/workflows/scorecard.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ jobs:
2222

2323
steps:
2424
- name: "Checkout code"
25-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
25+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2626
with:
2727
persist-credentials: false
2828

2929
- name: "Run analysis"
30-
uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
30+
uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
3131
with:
3232
results_file: results.sarif
3333
results_format: sarif
@@ -36,14 +36,14 @@ jobs:
3636
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
3737
# format to the repository Actions tab.
3838
- name: "Upload artifact"
39-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
39+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
4040
with:
4141
name: SARIF file
4242
path: results.sarif
4343
retention-days: 5
4444

4545
# Upload the results to GitHub's code scanning dashboard.
4646
- name: "Upload to code-scanning"
47-
uses: github/codeql-action/upload-sarif@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v3.24.0
47+
uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
4848
with:
4949
sarif_file: results.sarif

‎.github/workflows/test-bigbang.yml

+6-6
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: ubuntu-latest
3535
steps:
3636
- name: Checkout
37-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
37+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
3838

3939
- name: Setup golang
4040
uses: ./.github/actions/golang
@@ -46,7 +46,7 @@ jobs:
4646
build-examples: "false"
4747

4848
- name: Login to Iron Bank
49-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
49+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
5050
if: ${{ env.IRON_BANK_ROBOT_USERNAME != '' }}
5151
env:
5252
IRON_BANK_ROBOT_USERNAME: ${{ secrets.IRON_BANK_ROBOT_USERNAME }}
@@ -63,7 +63,7 @@ jobs:
6363

6464
# Upload the contents of the build directory for later stages to use
6565
- name: Upload build artifacts
66-
uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
66+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
6767
with:
6868
name: build-artifacts
6969
path: build/
@@ -74,10 +74,10 @@ jobs:
7474
needs: build
7575
steps:
7676
- name: Checkout
77-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
77+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
7878

7979
- name: Download build artifacts
80-
uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
80+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
8181
with:
8282
name: build-artifacts
8383
path: build/
@@ -97,7 +97,7 @@ jobs:
9797
uses: ./.github/actions/k3d
9898

9999
- name: Login to Iron Bank
100-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
100+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
101101
if: ${{ env.IRON_BANK_ROBOT_USERNAME != '' }}
102102
env:
103103
IRON_BANK_ROBOT_USERNAME: ${{ secrets.IRON_BANK_ROBOT_USERNAME }}

0 commit comments

Comments
 (0)