🌱 Bump the all-github-actions group across 1 directory with 12 updates#249
Open
dependabot[bot] wants to merge 1 commit intomasterfrom
Open
🌱 Bump the all-github-actions group across 1 directory with 12 updates#249dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps the all-github-actions group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [sqren/backport-github-action](https://github.com/sqren/backport-github-action) | `9.2.2` | `10.2.0` | | [actions/checkout](https://github.com/actions/checkout) | `3` | `6` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.3.0` | `6.2.0` | | [actions/cache](https://github.com/actions/cache) | `4.2.0` | `5.0.3` | | [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `6.3.2` | `9.2.0` | | [gaurav-nelson/github-action-markdown-link-check](https://github.com/gaurav-nelson/github-action-markdown-link-check) | `1.0.16` | `1.0.17` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `dcc7a0cba800f454d79fff4b993e8c3555bcc0a8` | `875e6e5df8b8b00995fe6f0afd7ff1531ac1c47d` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.2.1` | `2.5.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `1` | `3` | | [docker/login-action](https://github.com/docker/login-action) | `1` | `3` | | [mukunku/tag-exists-action](https://github.com/mukunku/tag-exists-action) | `1.2.0` | `1.7.0` | Updates `sqren/backport-github-action` from 9.2.2 to 10.2.0 - [Release notes](https://github.com/sqren/backport-github-action/releases) - [Commits](sorenlouv/backport-github-action@v9.2.2...v10.2.0) Updates `actions/checkout` from 3 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v3...v6) Updates `actions/setup-go` from 5.3.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@f111f33...7a3fe6c) Updates `actions/cache` from 4.2.0 to 5.0.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@1bd1e32...cdf6c1f) Updates `actions/github-script` from 7.0.1 to 8.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@60a0d83...ed59741) Updates `golangci/golangci-lint-action` from 6.3.2 to 9.2.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@051d919...1e7e51e) Updates `gaurav-nelson/github-action-markdown-link-check` from 1.0.16 to 1.0.17 - [Release notes](https://github.com/gaurav-nelson/github-action-markdown-link-check/releases) - [Commits](gaurav-nelson/github-action-markdown-link-check@1b916f2...3c3b66f) Updates `tj-actions/changed-files` from dcc7a0cba800f454d79fff4b993e8c3555bcc0a8 to 875e6e5df8b8b00995fe6f0afd7ff1531ac1c47d - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@dcc7a0c...875e6e5) Updates `softprops/action-gh-release` from 2.2.1 to 2.5.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@c95fe14...a06a81a) Updates `docker/setup-buildx-action` from 1 to 3 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v1...v3) Updates `docker/login-action` from 1 to 3 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v1...v3) Updates `mukunku/tag-exists-action` from 1.2.0 to 1.7.0 - [Release notes](https://github.com/mukunku/tag-exists-action/releases) - [Commits](mukunku/tag-exists-action@v1.2.0...v1.7.0) --- updated-dependencies: - dependency-name: sqren/backport-github-action dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: actions/setup-go dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: actions/cache dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: golangci/golangci-lint-action dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: gaurav-nelson/github-action-markdown-link-check dependency-version: 1.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions - dependency-name: tj-actions/changed-files dependency-version: 875e6e5df8b8b00995fe6f0afd7ff1531ac1c47d dependency-type: direct:production dependency-group: all-github-actions - dependency-name: softprops/action-gh-release dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-github-actions - dependency-name: docker/setup-buildx-action dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: docker/login-action dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-github-actions - dependency-name: mukunku/tag-exists-action dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a spectrocloud member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
![bulwark-spectrocloud[bot]](https://avatars.githubusercontent.com/u/36211249?s=60&v=4){kind=small}
There was a problem hiding this comment.
- GO-2025-3754
- Module: github.com/cloudflare/circl
- Found in: v1.3.7
- Fixed in: v1.6.1
- Example Traces:
1. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls x25519.init
2. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls goldilocks.init
3. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
4. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ecc.init
5. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
Please review these findings and fix the issues before merging.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-github-actions group with 12 updates in the / directory:
9.2.210.2.0365.3.06.2.04.2.05.0.37.0.18.0.06.3.29.2.01.0.161.0.17dcc7a0cba800f454d79fff4b993e8c3555bcc0a8875e6e5df8b8b00995fe6f0afd7ff1531ac1c47d2.2.12.5.013131.2.01.7.0Updates
sqren/backport-github-actionfrom 9.2.2 to 10.2.0Release notes
Sourced from sqren/backport-github-action's releases.
Commits
516854eBump Node 24 (#175)099cc6fBump backport to 10.2.0 (#174)929f69dPrevent example from failing on unmerged PRs (#133)ad888e9Bump package to 9.5.11c85cdaBump backport to 9.5.1 (#121)f7073a2v9.3.1619483dRequire Node 202a176e7Update owner from sqren to sorenlouv7567d5cv9.3.0-a8e4d3a2Remove early abort (#110)Updates
actions/checkoutfrom 3 to 6Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)08c6903Prepare v5.0.0 release (#2238)Updates
actions/setup-gofrom 5.3.0 to 6.2.0Release notes
Sourced from actions/setup-go's releases.
... (truncated)
Commits
7a3fe6cBump qs from 6.14.0 to 6.14.1 (#703)b9adafdBump actions/checkout from 5 to 6 (#686)d73f6bcREADME.md: correct to actions/checkout@v6 (#683)ae252eeBump@actions/cacheto v5 (#695)bf7446aBump js-yaml from 3.14.1 to 3.14.2 (#682)02aadfeFix Node.js version in action.yml (#691)4aaadf4Example for restore-only cache in documentation (#696)4dc6199Bump semver and@types/semver(#652)f3787beAdd comprehensive breaking changes documentation for v6 (#674)3a0c2c8Bump actions/publish-action from 0.3.0 to 0.4.0 (#641)Updates
actions/cachefrom 4.2.0 to 5.0.3Release notes
Sourced from actions/cache's releases.
... (truncated)
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
cdf6c1fMerge pull request #1695 from actions/Link-/prepare-5.0.3a1bee22Add review for the@actions/http-clientlicense4695763Add licensed outputdc73bb9Upgrade dependencies and address security warnings345d5c2Add 5.0.3 builds8b402f5Merge pull request #1692 from GhadimiR/main304ab5alicense for httpclient609fc19Update licensed record for cacheb22231eBuild93150cdAdd PR link to releasesUpdates
actions/github-scriptfrom 7.0.1 to 8.0.0Release notes
Sourced from actions/github-script's releases.
Commits
ed59741Merge pull request #653 from actions/sneha-krip/readme-for-v82dc352eBold minimum Actions Runner version in README01e118cUpdate README for Node 24 runtime requirements8b222acApply suggestion from@salmanmkcadc0eeaREADME for updating actions/github-script from v7 to v820fe497Merge pull request #637 from actions/node24e7b7f22update licenses2c81ba0Update Node.js version support to 24.xf28e40cMerge pull request #610 from actions/nebuk89-patch-11ae9958Update README.mdUpdates
golangci/golangci-lint-actionfrom 6.3.2 to 9.2.0Release notes
Sourced from golangci/golangci-lint-action's releases.
... (truncated)
Commits
1e7e51ebuild(deps): bump yaml from 2.8.1 to 2.8.2 in the dependencies group (#1324)5256ff0build(deps-dev): bump the dev-dependencies group with 3 updates (#1323)13fed6fchore: update workflows7afe8ffchore: update workflows5a92899chore: move samples into fixtures (#1321)aa6fad0feat: add version-file option (#1320)a6071aabuild(deps): bump actions/checkout from 5 to 6 (#1318)6e36c84build(deps-dev): bump the dev-dependencies group with 2 updates (#1317)e7fa5acfeat: automatic module directories (#1315)f3ae99fdocs: organize options (#1314)Updates
gaurav-nelson/github-action-markdown-link-checkfrom 1.0.16 to 1.0.17Release notes
Sourced from gaurav-nelson/github-action-markdown-link-check's releases.
Commits
3c3b66fMerge pull request #205 from Okabe-Junya/bump/markdown-link-checkdd5abb6bump markdown-link-check9574206Add bug report and feature request templates with Linkspector updateUpdates
tj-actions/changed-filesfrom dcc7a0cba800f454d79fff4b993e8c3555bcc0a8 to 875e6e5df8b8b00995fe6f0afd7ff1531ac1c47dChangelog
Sourced from tj-actions/changed-files's changelog.
... (truncated)
Commits
875e6e5chore(deps): bump github/codeql-action from 4.31.10 to 4.32.2 (#2790)8cba46echore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#2766)925972fchore(deps-dev): bump@types/nodefrom 25.0.0 to 25.2.2 (#2793)a98754bchore(deps): bump@stdlib/utils-convert-pathfrom 0.2.2 to 0.2.3 (#2795)9c13e73chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#2777)caee9d9fix: Update test.yml (#2781)16d791cchore(deps-dev): bump@types/lodashfrom 4.17.21 to 4.17.23 (#2759)8e056dechore(deps-dev): bump eslint-plugin-jest from 29.11.0 to 29.12.1 (#2756)7d5bbf4Updated README.md (#2771)078e2bcchore(deps): bump github/codeql-action from 4.31.7 to 4.31.10 (#2761)Updates
softprops/action-gh-releasefrom 2.2.1 to 2.5.0Release notes
Sourced from softprops/action-gh-release's releases.
... (truncated)
Changelog
Sourced from softprops/action-gh-release's changelog.