fix(deps): update all dependencies j:cdx-227#171
Merged
alexprudhomme merged 1 commit intomainfrom Aug 19, 2025
Merged
Conversation
4861acd to
0e1540c
Compare
0e1540c to
c2fb4b7
Compare
4e40f78 to
ada3749
Compare
6c7070b to
238d137
Compare
419d9c3 to
68a97ec
Compare
c1ab79d to
651fb95
Compare
651fb95 to
e164b6e
Compare
0d8c706 to
c6ef112
Compare
e492a0e to
cedf5e9
Compare
cedf5e9 to
5e9cf3f
Compare
f4deb60 to
8ac2ab3
Compare
8ac2ab3 to
0dd148f
Compare
cefdd4e to
9b8b121
Compare
16702af to
25e8b6b
Compare
90ebdf5 to
0e249ae
Compare
477183b to
2cec8bc
Compare
34a24c5 to
590a469
Compare
7687271 to
7909280
Compare
7909280 to
893edd5
Compare
alexprudhomme
approved these changes
Aug 19, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
19.5.0->19.8.17.1.2->7.2.2v4.2.2->v4.3.011bd719->08eba0bv4.5.0->v4.7.1v4.1.0->v4.4.0v4.4.3->v4.6.2v2.4.0->v2.4.2v2.10.1->v2.13.02.43.0->2.46.13.9.9->3.9.111.17.1->1.19.05.14.2->5.19.02.13.0->2.14.03.0.2->3.2.02.11.0->2.13.12.24.1->2.25.13.2.7->3.2.83.11.1->3.11.3[skip release]
Release Notes
conventional-changelog/commitlint (@commitlint/config-conventional)
v19.8.1Compare Source
Note: Version bump only for package @commitlint/config-conventional
v19.8.0Compare Source
Performance Improvements
node:prefix to bypass require.cache call for builtins (#4302) (0cd8f41)19.7.1 (2025-02-02)
Note: Version bump only for package @commitlint/config-conventional
v19.7.1Compare Source
Note: Version bump only for package @commitlint/config-conventional
v19.6.0Compare Source
Note: Version bump only for package @commitlint/config-conventional
octokit/auth-app.js (@octokit/auth-app)
v7.2.2Compare Source
Bug Fixes
v7.2.1Compare Source
Bug Fixes
v7.2.0Compare Source
Features
v7.1.5Compare Source
Bug Fixes
v7.1.4Compare Source
Bug Fixes
v7.1.3Compare Source
Bug Fixes
actions/checkout (actions/checkout)
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
actions/setup-java (actions/setup-java)
v4.7.1Compare Source
What's Changed
Documentation changes
Dependency updates:
Full Changelog: actions/setup-java@v4...v4.7.1
v4.7.0Compare Source
What's Changed
cachefrom version 3.2.4 to 4.0.0 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/724@actions/http-clientfrom 2.2.1 to 2.2.3 by @dependabot in https://github.com/actions/setup-java/pull/728actions/publish-immutable-actionfrom 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-java/pull/727@types/jestfrom 29.5.12 to 29.5.14 by @dependabot in https://github.com/actions/setup-java/pull/729New Contributors
Full Changelog: actions/setup-java@v4...v4.7.0
v4.6.0Compare Source
What's Changed
Add-ons:
Bug fixes:
New Contributors
Full Changelog: actions/setup-java@v4...v4.6.0
actions/setup-node (actions/setup-node)
v4.4.0Compare Source
What's Changed
Bug fixes:
Enhancement:
Dependency update:
New Contributors
Full Changelog: actions/setup-node@v4...v4.4.0
v4.3.0Compare Source
What's Changed
Dependency updates
New Contributors
Full Changelog: actions/setup-node@v4...v4.3.0
v4.2.0Compare Source
What's Changed
@actions/cacheto^4.0.0by @priyagupta108 in https://github.com/actions/setup-node/pull/1191New Contributors
Full Changelog: actions/setup-node@v4...v4.2.0
actions/upload-artifact (actions/upload-artifact)
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
v4.6.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.1
v4.6.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.0
v4.5.0Compare Source
What's Changed
Node.jsversion in action by @hamirmahal in https://github.com/actions/upload-artifact/pull/578artifact-digestoutput by @bdehamer in https://github.com/actions/upload-artifact/pull/656New Contributors
Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0
ossf/scorecard-action (ossf/scorecard-action)
v2.4.2Compare Source
What's Changed
This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.
Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2
v2.4.1Compare Source
What's Changed
file_modeinput which controls how repository files are fetched from GitHub. The default isarchive, butgitproduces the most accurate results for repositories with.gitattributesfiles at the cost of analysis speed.--file-modeby @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1
step-security/harden-runner (step-security/harden-runner)
v2.13.0Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.13.0
v2.12.2Compare Source
What's Changed
Added HTTPS Monitoring for additional destinations - *.githubusercontent.com
Bug fixes:
Full Changelog: step-security/harden-runner@v2...v2.12.2
v2.12.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.12.1
v2.12.0Compare Source
What's Changed
A new option,
disable-sudo-and-containers, is now available to replace thedisable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.New detections have been added based on insights from the tj-actions and reviewdog actions incidents.
Full Changelog: step-security/harden-runner@v2...v2.12.0
v2.11.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.11.1
v2.11.0Compare Source
What's Changed
Release v2.11.0 in #498
Harden-Runner Enterprise tier now supports the use of eBPF for DNS resolution and network call monitoring
Full Changelog: step-security/harden-runner@v2...v2.11.0
v2.10.4Compare Source
What's Changed
Fixed a potential Harden-Runner post step failure that could occur when printing agent service logs. The fix gracefully handles failures without failing the post step.
Full Changelog: step-security/harden-runner@v2...v2.10.4
v2.10.3Compare Source
What's Changed
Fixed an issue where DNS requests using uppercase characters (e.g., EXAMPLE.com) were blocked even when the domain was present in the allowed list. This update standardizes domain names to lowercase for consistent comparison.
Full Changelog: step-security/harden-runner@v2...v2.10.3
v2.10.2Compare Source
What's Changed
Fixes low-severity command injection weaknesses
The advisory is here: GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container
Full Changelog: step-security/harden-runner@v2...v2.10.2
diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)
v2.45.0Added
gofmt(#2001)v2.44.0Added
DiffMessageFormatterwhich allows to retrieve diffs with their line numbers (#1960)Fixed
bufinvocation. (#1976)Changed
ktlintversion to latest1.0.1->1.1.1. (#1973)googleJavaFormatversion to latest1.18.1->1.19.2. (#1971)diktatversion to latest1.2.5->2.0.0. (#1972)apache/commons-codec (commons-codec:commons-codec)
v1.19.0The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.19.0.
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
v1.17.2The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
mockito/mockito (org.mockito:mockito-core)
v5.19.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.19.0
(#3681)
v5.18.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.18.0
v5.17.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.17.0
mockito-inlineshould be modified. (#3621)v5.16.1Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.16.1
[
v5.16.0](https://redirect.github.com/mockito/mocConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.