Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: update scorecard action dependencies #2671

Closed

Conversation

angular-robot
Copy link
Collaborator

@angular-robot angular-robot commented Mar 19, 2025

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action patch v4.6.1 -> v4.6.2
github/codeql-action action patch v3.28.11 -> v3.28.12

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

github/codeql-action (github/codeql-action)

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025
  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker comp: build renovate managed labels Mar 19, 2025
@angular-robot angular-robot bot added the area: build & ci Related the build and CI infrastructure of the project label Mar 19, 2025
@angular-robot angular-robot changed the title build: update github/codeql-action action to v3.28.12 build: update scorecard action dependencies Mar 19, 2025
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action branch from 8619dd7 to 6a4bb15 Compare March 19, 2025 18:22
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action branch from 6a4bb15 to 19e9032 Compare March 20, 2025 17:36
Copy link
Member

@josephperrott josephperrott left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@josephperrott
Copy link
Member

This PR was merged into the repository by commit 68b9c44.

The changes were merged into the following branches: main

@angular-robot angular-robot deleted the ng-renovate/scorecard-action branch March 21, 2025 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project comp: build renovate managed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants